I have the application process enabled for people to join my instance, and I’ve gotten about 20 bots trying to join today. I can tell because they are generic messages and I put a question in asking what 2+3 is and none of them have answered it at all, they just have a generic message.
Be careful out there, for all you small instance owners.
When the whole instance is spam, it’s easy to defederate. When it is camouflaged in a legit instance, it’s harder to root out.