Theres really no point litigating this 4 years later (who cares) but it did happen. Uber had bots of some type, thousands of them in a single room. They were the largest user of our v1 API, which was an ancient shitty PHP base, and whatever they were doing put an enormous load on our backend during peak traffic periods and crippled the entire service.

Seeing this behavior was as easy as doing a join in mysql for user ids and rooms. I mean it's likely you wouldn't have seen it, or the room, or had knowledge of it unless you weren't directly involved with whatever it was?