Not to be mean but I believe this is purely due to dev incompetence and vibecoding the server. The DDoS attacks could be just summed up to AI writing some slop networking code and then reporting it as a DDoS and the dev not knowing the difference and then server breaking under high load.
Population ...