DDoS can be as simple as a mass of users just hitting the refresh link as fast as possible at the same time. The most effective kinds usually use bot nets, but . . . It's not necessary. Slow downs to a site have been accomplished without bot nets.