While attacks are still coming in, most sites are loading, some asp.net sites are being slow to generate on first hits, due to the added processing of the attacks. I am going to really double down on the process on the upgrade to 2008 for win32 as well. We've done the upgrade twice and each time errors happen with the asp.net sites there as well. This server really is giving some trouble, but moving to 2008 would be a big benefit in getting even attacks like this from impacting as bad with better application routing ability at low level.