Far from normal. Easy to ban, just limit orders in API.
there are many more ways of dealing with bots
+ set minimum allowed amount of single order equal to 10 or 100 usd (to get rid of all that 0.000001 junk and chump change "orders"). such a waste of resources (all those unnecessary connections to servers)
+ set limit 1 order per account per 10 minutes
etc