masto admin here. my instances are also getting hammered from external traffic.
The annoying thing is, I don't think that masto has any good tools to check which instances are causing the traffic. Especially as it's getting rerouted through a relay in my case