After having done your homework in validating input data and throttling accesses, you can also consider introducing some CAPTCHA to (try to) ensure there's a human on the other end of the wire.