I'm not a sysadmin but doesn't the root cause sound like a missing fail2ban or something? (Sounds like a whole bunch of problems stacked on top of each other honestly.)
Yes, the article does list multiple root causes, including that one.
Yes, the article does list multiple root causes, including that one.