Bot traffic has really reduced in the wake of an attack on a Russian internet company – but it doesn’t tell the full story