i cant say for sure but usually this DDoS attacks coming from big sources last for longer time, so i would say server is still under DDoS but admins found a way to mitigate it, and prolly this lags/delays are still due to the DDoS.
i am thinking the same...