We had to reboot it as it was responding slowly everywhere, not down but even hard to login. It is up again now on IIS and we are logging in to check and monitor closely.
Seems to be resolved we will keep a session and a watch on it, but nothing has come back since the reboot so it doesn't seem to be a DOS attack which we were suspecting possibly at first due to signs.
