Long-dos is usually not a botnet but a single or a few attackers requesting a resource heavy page on and on or using a technic like slowloris. If you are using WordPress I am sure you find some signs in your log.

The solution other than with ddos is to make the app better. Caching, access control and limiting, etc.