Actually I think it is more likely a dos attack or some program on the webserver not being configured correctly. We will be doing a overhaul of the web server today to work on problems.

But yea, the cpu usage is low and I can not really track bandwith because the monitor is broken. This is what leads me to believe that it is a DOS because nothing else really fits...