This "attack" needs a web-facing server, so a lot of them will be in $CLOUD.
Not a member of The Register? Create a new account here.
Remember me on this computer? Post anonymously?