A company's public web server suddenly becomes unresponsive to legitimate users. Investigating, an analyst finds thousands of TCP connections stuck in a half-open state, each awaiting a final acknowledgment that never arrives, exhausting the server's connection table. What type of attack is most likely occurring?