“How can you locate a suspect that way if you don’t have a name or phone number?”
Simple: Gather all the pings for each bombing location. Is there a single number that was at each one? Yes? Then there is your suspect.
Probably paid the bill via his phone which has GPS. There is a manual way to get rid of the tracking but not everyone reads directions.