They must pick random targets as they were just blasting away with GET requests but with random params in the URI, which won't matter much to a websocket relay.