Unless they're actually dropping the connections with a RST, I wonder how much bots repeatedly hammering at their CAPTCHA pages (which is actually relatively large in comparison to many static sites) costs them, vs. just serving the actual content which could actually be smaller.