We are getting hit pretty hard by credit card testers, with some of our groups getting blocked by Stripe. I think we'll want to do more work with the Firewall extension and be a bit more aggressive with blocking IPs. But for starters I'm proposing this change to just get some insight into the problem.