It's just brute force. It's not like they're sneaking into the site and disabling the web server. They're just assaulting it from the front until it cracks under the pressure. In other words, they're taking down the site, but they're not gaining access to any of the source or data in the site, or gaining control over the servers.