From my tests it appears that the limit is testing against outgoing individual emails, but not per outgoing recipient, so if a spammer is sending to 200 recipients per email, and the limit is 100, a spammer (or compromised site) can send out 20,000 emails before the limit is reached.
Someone feel free to correct me if I'm wrong, but that's how it appears to work for me, upon testing.
Jeff