But once the spamming machine has worked that out once, they can submit the same integer every time.

It would be better if the server sent a request saying send me an integer which has a hash beginning with npqr where n, p q and r are all random characters.