We had a denial of service attack against our web server this morning which consisted of someone initiating more than 400 requests from a very slow connection. This had the effect of launching 400 workers that just backed up a large amount of data in queue because the connection was too slow to receive the data.
These were all coming from one IP address rather than a BotNet (which would have been ineffective for this type of attack as it would have had the bandwidth to absorb the traffic). The offending IP address has been blocked.