Tbf there’s spam and trolls everywhere, but I think the DDoS thing is maybe just working down the list of popular instances. However this has probably been obfuscated somewhat, since bot-filled instances have jumped up the tables in terms of number of users.