It is sad that so many servers are still vulnerable on an issue that has been reported through all major mainstream news networks. We've witnessed several attacks many days after Shellshock was fixed, and chasing down the botnet scripts we saw hundreds of servers compromised.

The story and scripts were published on a blog post in case anyone wants to check out a standard botnet attack:

http://blog.mist.io/post/100582053116/anatomy-of-a-shellshoc...