I don't know the details... my guess would be that it was dumb luck on the DOS abusers' part, they probably had a robot looking around for convenient sites to launch DOS from, and happened to randomly stumble upon the IP address of the onboard health-monitoring computer. The perpetrators may have not known the actual identity or physical location of the NASA computer that they were "borrowing"...