Question about spam attacks

Just something I’m curious about. Could someone potentially spam the network with 1000s of transactions for example, even say they don’t have the money to pay the gas fees? What is in place to reject these transactions? Is it checked at every node whether the sender can pay the transaction fee before it’s included in a block, because surely doing this wastes a lot of time and therefore it could be spammed anyway?