I have now installed a plugin that limits the number of pm’s to maximum ten a day for normal users. Still not really a solution to the problem, but now the bots can at least not mass pm everybody anymore.
This is my signature. You can change your signature in the profile