Shellshock vulnerable site hacked and defaced....

See: http://killmalware.com/sabttaresh.ir/#
See: http://toolbar.netcraft.com/site_report?url=http://sabttaresh.ir
For the IP hosted: http://149.202.138.67/cgi-sys/defaultwebpage.cgi DNS cache…
Missing Declaration (At line 1, column 1)
URL http://149.202.138.67/cgi-sys/defaultwebpage.cgi
MD5 (URL) 1d1fcaa926755bf68e507f4fec1cd594
SHA256 (URL) 749abeb5d2fa1fcfd287dab42475ae2fc4951dc94502a7554246d4359f672a28
File Name defaultwebpage.cgi
File Size 5,678byte
File Type HTML document, UTF-8 Unicode text, with very long lines
MD5 417d35b7e528635ac322618d9640c64a
SHA256 b2328566d56ad66597aa08f234a0f516d39e15f93af05de0faaaaca4e5f0eb10
SSDEEP 96:coPLL7M4uU/2fdymNdRP5V1WwU4g8GfdPrEN/P5V1Ww+:aNnQrYXNHQl
Re: https://www.scumware.org/report/149.202.138.67
Re: http://toolbar.netcraft.com/site_report?url=http://149.202.138.67

pol
Read: https://blog.cloudflare.com/inside-shellshock/