Not sure how to check if they're bots or not, but I would enable captcha for registrations. Also that's where I was pointing at, other users might have searched for these communities. I also have many of them on my instance which I've never searched for, and I think that it's all from them. All it takes is for some random user to click on a community in a post and it's then added to your instances.