Bot traffic has really reduced in wake of an attack on a Russian internet company – but it doesn’t tell the full story