I supposed you were talking about a typical DOS attack .
You're right but you're talking about malicious written clients .
That's not a typical DOS attack .

If you drop the term "DOS" , everone assumes youre talking about CPU , memory and connection overloads .