how does a hacker know about vulnerable systems (servers) on the net.?