Attackers do lots of homework

From yesterdays apache logs. Look at the search term "howto remote exploit 127.0.01". Even better the search came from a host named smarsmtp02.cosmote.gr. Interesting....

Wonder how many pages this guy visited? For the record mullingsecurity.com is hit #14 in google.

195.167.65.19 - - [13/Jun/2007:07:21:46 -0400]
"GET /2006/01/howto-getting-remote-access-to-windows.html HTTP/1.0" 200 20478 "http://www.google.com/search?q=howto+remote+exploit+127.0.0.1&rls=com.microsoft:el&ie=UTF-8&oe=UTF-8&startIndex=&startPage=1"
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)"