Most DDOS are trolling. Maybe a Bloser did it as a larf. I think the one time we were hacked off line several years ago, it might have been alluded that a rival team supporter did it.
But it could also be down the bots who log on occaisionally. When they are blocked the programmer might not have done a timeout on tries for connection and it might spawn extra tries until the figure hits 30k entities and fucks up the site.