Personally, I've seen a lot of attempting hacks come out of CN and BR. In the later case, I'm inclined to think that it's just a preponderance of insecure / r00t kitted boxes that are then being used as a "hop" to hack other boxes.