search

p0pr0ck5 / lua-resty-waf

High-performance WAF built on the OpenResty stack
GNU General Public License v3.0
1.28k stars 305 forks source link

Question about logging #274

Closed rm3nchaca closed 7 years ago

rm3nchaca commented 7 years ago

Hi, I'm trying the waf, but I can't see anything in the logs. It works if I move the line https://github.com/p0pr0ck5/lua-resty-waf/blob/master/lib/resty/waf.lua#L167 before the if condition about the phase. In my .conf I have:

access_by_lua_block {
    local lua_resty_waf = require "resty.waf"
    local waf = lua_resty_waf:new()
    waf:set_option("debug", true)
    waf:set_option("mode", "ACTIVE")
    waf:set_option("event_log_periodic_flush", 5)
    waf:set_option("event_log_target", "file")
    waf:set_option("event_log_request_body", true)
    waf:set_option("event_log_target_path", "/usr/local/openresty/nginx/logs/waf_event.log")
    waf:exec()
}

header_filter_by_lua_block {
    local lua_resty_waf = require "resty.waf"
    local waf = lua_resty_waf:new()
    waf:exec()
}

body_filter_by_lua_block {
    local lua_resty_waf = require "resty.waf"
    local waf = lua_resty_waf:new()
    waf:exec()
}

log_by_lua_block {
    local lua_resty_waf = require "resty.waf"
    local waf = lua_resty_waf:new()
    waf:exec()
}

It returns a forbidden error as expected. Am I missing something? Thank you!

p0pr0ck5 commented 7 years ago

Hi,

What version are you running? What do the debug logs say? What request are you sending? What rules are you expecting to trip?

rm3nchaca commented 7 years ago

It's the 0.11, I've just cloned the repo and test the default configuration, and test sending something like /?x= Everything works fine, but i can't see that in the logs. I put a line before to write to the error.log and show me that the phase was "access".

p0pr0ck5 commented 7 years ago

Can you paste a debug log for this request and config?

rm3nchaca commented 7 years ago 
location / {
    index  index.html;
    access_by_lua_block {
        local lua_resty_waf = require "resty.waf"
        local waf = lua_resty_waf:new()
        waf:set_option("debug", true)
        waf:set_option("debug_log_level", ngx.STDERR)
        waf:set_option("mode", "ACTIVE")
        waf:set_option("event_log_periodic_flush", 5)
        waf:set_option("event_log_target", "file")
        waf:set_option("event_log_request_body", true)
        waf:set_option("event_log_target_path", "/usr/local/openresty/nginx/logs/waf_event.log")
        waf.denycc()
        waf:exec()
    }

    header_filter_by_lua_block {
        local lua_resty_waf = require "resty.waf"
        local waf = lua_resty_waf:new()
        waf:exec()
    }

    body_filter_by_lua_block {
        local lua_resty_waf = require "resty.waf"
        local waf = lua_resty_waf:new()
        waf:exec()
    }

    log_by_lua_block {
        local lua_resty_waf = require "resty.waf"
        local waf = lua_resty_waf:new()
        waf:exec()
    }
}
2017/04/27 22:27:14 [] 13663#0: *2 [lua] request.lua:31: parse_request_body(): [f929b55deede4c4ff693] Request has no content type, ignoring the body, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:508: exec(): [f929b55deede4c4ff693] Beginning run of phase access, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:511: exec(): [f929b55deede4c4ff693] Beginning ruleset 11000_whitelist, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 11001, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key METHOD|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 11001, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:23: [f929b55deede4c4ff693] Chaining (pre-processed), client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 11002, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 11003, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key METHOD|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 11004, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 11005, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 11006, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 11007, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:511: exec(): [f929b55deede4c4ff693] Beginning ruleset 20000_http_violation, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 20001, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key METHOD|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 20001, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:23: [f929b55deede4c4ff693] Chaining (pre-processed), client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 20002, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|content-length|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: content-length, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:279: _process_rule(): [f929b55deede4c4ff693] No values for this collection, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 20003, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key METHOD|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 2, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 20005, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|content-encoding|lowercase, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: content-encoding, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:279: _process_rule(): [f929b55deede4c4ff693] No values for this collection, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 20006, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|expect|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: expect, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:279: _process_rule(): [f929b55deede4c4ff693] No values for this collection, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 2, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 20008, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|keys|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:254: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting the keys, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 20008, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:23: [f929b55deede4c4ff693] Chaining (pre-processed), client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 20009, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|pragma|lowercase, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: pragma, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:217: _do_transform(): [f929b55deede4c4ff693] doing transform of type lowercase on collection value no-cache, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 20009, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:23: [f929b55deede4c4ff693] Chaining (pre-processed), client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 20010, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|keys|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 2, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 20012, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|range|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: range, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:279: _process_rule(): [f929b55deede4c4ff693] No values for this collection, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 20013, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|range|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:279: _process_rule(): [f929b55deede4c4ff693] No values for this collection, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 20014, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|request-range|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: request-range, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:279: _process_rule(): [f929b55deede4c4ff693] No values for this collection, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 20015, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|connection|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: connection, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:511: exec(): [f929b55deede4c4ff693] Beginning ruleset 21000_http_anomaly, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 21001, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|keys|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 21002, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key METHOD|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 21002, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:23: [f929b55deede4c4ff693] Chaining (pre-processed), client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 21003, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|keys|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 21004, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key METHOD|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 21004, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:23: [f929b55deede4c4ff693] Chaining (pre-processed), client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 21005, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|accept|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: accept, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 21006, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|keys|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 21007, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|user-agent|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: user-agent, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 21008, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|keys|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 21008, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:23: [f929b55deede4c4ff693] Chaining (pre-processed), client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 21009, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|content-length|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:279: _process_rule(): [f929b55deede4c4ff693] No values for this collection, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 21010, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|host|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: host, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 21010, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is 2, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] storage.lua:39: set_var(): [f929b55deede4c4ff693] Incrementing a non-existing value, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] storage.lua:51: set_var(): [f929b55deede4c4ff693] Setting TX:anomaly_score to 2, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is Host header contains an IP address, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:41: [f929b55deede4c4ff693] Score isn't a thing anymore, see TX.anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:511: exec(): [f929b55deede4c4ff693] Beginning ruleset 35000_user_agent, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 35001, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|user-agent|lowercase, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: user-agent, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:217: _do_transform(): [f929b55deede4c4ff693] doing transform of type lowercase on collection value Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 35002, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|user-agent|lowercase, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 35002, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:511: exec(): [f929b55deede4c4ff693] Beginning ruleset 40000_generic_attack, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40001, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40002, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:217: _do_transform(): [f929b55deede4c4ff693] doing transform of type uri_decode on collection value x, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:217: _do_transform(): [f929b55deede4c4ff693] doing transform of type uri_decode on collection value <script>alert();</script>, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 40002, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is 4, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] storage.lua:51: set_var(): [f929b55deede4c4ff693] Setting TX:anomaly_score to 6, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is Repetitive non-word characters anomaly detected, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:41: [f929b55deede4c4ff693] Score isn't a thing anymore, see TX.anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40003, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40004, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40005, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40006, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40007, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40008, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|content-length|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:279: _process_rule(): [f929b55deede4c4ff693] No values for this collection, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40009, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|transfer-encoding|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: transfer-encoding, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:279: _process_rule(): [f929b55deede4c4ff693] No values for this collection, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40010, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40011, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40012, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40013, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40014, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40015, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40016, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40017, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40018, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40019, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40020, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40021, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40022, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 40023, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:511: exec(): [f929b55deede4c4ff693] Beginning ruleset 41000_sqli, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41001, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41002, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41003, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41004, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41005, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 41005, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is 4, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] storage.lua:51: set_var(): [f929b55deede4c4ff693] Setting TX:anomaly_score to 10, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is SQL Tautologies, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:41: [f929b55deede4c4ff693] Score isn't a thing anymore, see TX.anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41006, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41007, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41008, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41009, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41010, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41011, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41012, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41013, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41014, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key COOKIES|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41015, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 41015, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is 4, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] storage.lua:51: set_var(): [f929b55deede4c4ff693] Setting TX:anomaly_score to 14, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is SQL Injection character anomaly - ARGS, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:41: [f929b55deede4c4ff693] Score isn't a thing anymore, see TX.anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41016, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41017, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41018, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41019, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41020, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41021, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41022, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41023, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41024, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41025, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41026, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41027, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41028, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41029, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41030, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41031, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41032, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41033, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41034, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41035, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 41036, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:511: exec(): [f929b55deede4c4ff693] Beginning ruleset 42000_xss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42001, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42002, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:217: _do_transform(): [f929b55deede4c4ff693] doing transform of type html_decode on collection value x, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] transform.lua:108: _do_transform(): [f929b55deede4c4ff693] html decoded value is x, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:217: _do_transform(): [f929b55deede4c4ff693] doing transform of type html_decode on collection value <script>alert();</script>, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] transform.lua:108: _do_transform(): [f929b55deede4c4ff693] html decoded value is <script>alert();</script>, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:217: _do_transform(): [f929b55deede4c4ff693] doing transform of type compress_whitespace on collection value x, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:217: _do_transform(): [f929b55deede4c4ff693] doing transform of type compress_whitespace on collection value <script>alert();</script>, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42003, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42004, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42005, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42006, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42007, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42008, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42009, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42010, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42011, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42012, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42013, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42014, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42015, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42016, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42017, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42018, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42019, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42020, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42021, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42022, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42023, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42024, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42025, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42026, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42027, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42028, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42029, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42030, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42031, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42032, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42033, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42034, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42035, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42036, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42037, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42038, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42039, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42040, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42041, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42042, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42043, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 42043, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is 4, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] storage.lua:51: set_var(): [f929b55deede4c4ff693] Setting TX:anomaly_score to 18, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is XSS (Cross-Site Scripting), client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:41: [f929b55deede4c4ff693] Score isn't a thing anymore, see TX.anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42044, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42045, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42046, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42047, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42048, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42049, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42050, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42051, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42052, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42053, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42054, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42055, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42056, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42057, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42058, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42059, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 42059, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is 4, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] storage.lua:51: set_var(): [f929b55deede4c4ff693] Setting TX:anomaly_score to 22, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is XSS (Cross-Site Scripting), client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:41: [f929b55deede4c4ff693] Score isn't a thing anymore, see TX.anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42060, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42061, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42062, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42063, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42064, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42065, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42066, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42067, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42068, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42069, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 42069, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is 4, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] storage.lua:51: set_var(): [f929b55deede4c4ff693] Setting TX:anomaly_score to 26, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is XSS (Cross-Site Scripting) - HTML Tag Handler, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:41: [f929b55deede4c4ff693] Score isn't a thing anymore, see TX.anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42070, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42071, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42072, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42073, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42074, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42075, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42076, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 42076, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is 4, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] storage.lua:51: set_var(): [f929b55deede4c4ff693] Setting TX:anomaly_score to 30, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is XSS (Cross-Site Scripting) - JS Fragments, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:41: [f929b55deede4c4ff693] Score isn't a thing anymore, see TX.anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42077, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42078, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42079, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42080, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42081, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42082, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42083, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 42083, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is 4, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] storage.lua:51: set_var(): [f929b55deede4c4ff693] Setting TX:anomaly_score to 34, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is XSS (Cross-Site Scripting) - IE Filter, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:41: [f929b55deede4c4ff693] Score isn't a thing anymore, see TX.anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42084, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42085, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42086, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42087, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42088, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42089, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42090, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42091, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42092, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42093, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42094, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42095, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42096, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 42097, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:511: exec(): [f929b55deede4c4ff693] Beginning ruleset 90000_custom, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90001, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|user-agent|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90002, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90003, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 2, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90005, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 3, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90008, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 2, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90010, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|specific|user-agent|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90011, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 2, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90013, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 3, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90016, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 3, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90019, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90020, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_HEADERS|all|1|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 1, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90021, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key URI|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:263: _process_rule(): [f929b55deede4c4ff693] Collection cache hit!, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset 3, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 90024, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key REQUEST_BODY|keys|1|lowercase, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:250: _process_rule(): [f929b55deede4c4ff693] Collection cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:279: _process_rule(): [f929b55deede4c4ff693] No values for this collection, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:350: _process_rule(): [f929b55deede4c4ff693] Returning offset nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:511: exec(): [f929b55deede4c4ff693] Beginning ruleset 99000_scoring, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:539: exec(): [f929b55deede4c4ff693] Processing rule 99001, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:247: _process_rule(): [f929b55deede4c4ff693] Checking for collection_key TX|specific|anomaly_score|nil, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:260: _process_rule(): [f929b55deede4c4ff693] Forcing cache miss, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:228: _parse_collection(): [f929b55deede4c4ff693] Parse collection is getting a specific value: anomaly_score, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:283: _process_rule(): [f929b55deede4c4ff693] Parsing dynamic pattern: %{SCORE_THRESHOLD}, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is 5, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:301: _process_rule(): [f929b55deede4c4ff693] Match of rule 99001, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is Request score greater than score threshold, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] util.lua:150: parse_dynamic_value(): [f929b55deede4c4ff693] Parsed dynamic value is 34, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] storage.lua:117: persist(): [f929b55deede4c4ff693] Persisting storage type dict, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:169: _finalize(): LOG_PHASE: access, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] actions.lua:26: [f929b55deede4c4ff693] Rule action was DENY, so telling nginx to quit, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:169: _finalize(): LOG_PHASE: log while logging request, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:172: _finalize(): LOGGING: log while logging request, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/04/27 22:27:14 [] 13663#0: *2 [lua] waf.lua:727: write_log_events(): entra log while logging request, client: 189.207.86.15, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
rm3nchaca commented 7 years ago

I've also tried to call the waf in my route to 50x and forbidden:

error_page   500 502 503 504 403  /50x.html;
        location = /50x.html {
            root   html;
           ........
        }
p0pr0ck5 commented 7 years ago

What modifications have you made to this project? waf.denycc() is not a valid function? And i see some changes to the debug logs (probably benign, but makes me wonder what else was altered).

rm3nchaca commented 7 years ago

Hi! I've added several ngx.log for debugging purpose, and start trying a module, but removing everything remains the same :(. Actually, with a clean install. That's why I was wondering I've had configuration mistakes.
I'm going to play more, I'm using openresty 1.11.2.2 on debian 8. Thanks!

p0pr0ck5 commented 7 years ago

@rm3nchaca what do the debug logs look like with a clean install, no modifications?

rm3nchaca commented 7 years ago

Hi! sorry for the delay... here are the logs:

2017/05/12 09:55:23 [] 5148#0: *1 [lua] request.lua:31: parse_request_body(): [9f3d1c32c7e8afe9f511] Request has no content type, ignoring the body, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:508: exec(): [9f3d1c32c7e8afe9f511] Beginning run of phase access, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:511: exec(): [9f3d1c32c7e8afe9f511] Beginning ruleset 11000_whitelist, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 11001, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key METHOD|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 11001, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:23: [9f3d1c32c7e8afe9f511] Chaining (pre-processed), client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 11002, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 11003, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key METHOD|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 11004, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 11005, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 11006, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 11007, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:511: exec(): [9f3d1c32c7e8afe9f511] Beginning ruleset 20000_http_violation, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 20001, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key METHOD|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 20001, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:23: [9f3d1c32c7e8afe9f511] Chaining (pre-processed), client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 20002, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|content-length|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:228: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting a specific value: content-length, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:279: _process_rule(): [9f3d1c32c7e8afe9f511] No values for this collection, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 20003, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key METHOD|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 2, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 20005, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|content-encoding|lowercase, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:228: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting a specific value: content-encoding, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:279: _process_rule(): [9f3d1c32c7e8afe9f511] No values for this collection, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 20006, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|expect|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:228: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting a specific value: expect, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:279: _process_rule(): [9f3d1c32c7e8afe9f511] No values for this collection, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 2, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 20008, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|keys|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:254: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting the keys, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 4, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 20012, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|range|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:228: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting a specific value: range, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:279: _process_rule(): [9f3d1c32c7e8afe9f511] No values for this collection, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 20013, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|range|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:279: _process_rule(): [9f3d1c32c7e8afe9f511] No values for this collection, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 20014, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|request-range|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:228: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting a specific value: request-range, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:279: _process_rule(): [9f3d1c32c7e8afe9f511] No values for this collection, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 20015, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|connection|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:228: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting a specific value: connection, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:511: exec(): [9f3d1c32c7e8afe9f511] Beginning ruleset 21000_http_anomaly, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 21001, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|keys|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 21002, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key METHOD|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 21002, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:23: [9f3d1c32c7e8afe9f511] Chaining (pre-processed), client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 21003, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|keys|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 21004, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key METHOD|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 21004, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:23: [9f3d1c32c7e8afe9f511] Chaining (pre-processed), client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 21005, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|accept|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:228: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting a specific value: accept, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 21006, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|keys|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 21007, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|user-agent|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:228: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting a specific value: user-agent, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 21008, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|keys|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 21008, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:23: [9f3d1c32c7e8afe9f511] Chaining (pre-processed), client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 21009, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|content-length|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:279: _process_rule(): [9f3d1c32c7e8afe9f511] No values for this collection, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 21010, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|host|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:228: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting a specific value: host, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 21010, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is 2, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] storage.lua:39: set_var(): [9f3d1c32c7e8afe9f511] Incrementing a non-existing value, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] storage.lua:51: set_var(): [9f3d1c32c7e8afe9f511] Setting TX:anomaly_score to 2, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is Host header contains an IP address, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:41: [9f3d1c32c7e8afe9f511] Score isn't a thing anymore, see TX.anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:511: exec(): [9f3d1c32c7e8afe9f511] Beginning ruleset 35000_user_agent, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 35001, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|user-agent|lowercase, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:228: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting a specific value: user-agent, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:217: _do_transform(): [9f3d1c32c7e8afe9f511] doing transform of type lowercase on collection value Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 35002, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|user-agent|lowercase, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 35002, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:511: exec(): [9f3d1c32c7e8afe9f511] Beginning ruleset 40000_generic_attack, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40001, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40002, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:217: _do_transform(): [9f3d1c32c7e8afe9f511] doing transform of type uri_decode on collection value x, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:217: _do_transform(): [9f3d1c32c7e8afe9f511] doing transform of type uri_decode on collection value <script>alert();</script>, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 40002, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is 4, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] storage.lua:51: set_var(): [9f3d1c32c7e8afe9f511] Setting TX:anomaly_score to 6, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is Repetitive non-word characters anomaly detected, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:41: [9f3d1c32c7e8afe9f511] Score isn't a thing anymore, see TX.anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40003, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40004, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40005, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40006, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40007, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40008, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|content-length|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:279: _process_rule(): [9f3d1c32c7e8afe9f511] No values for this collection, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40009, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|transfer-encoding|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:228: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting a specific value: transfer-encoding, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:279: _process_rule(): [9f3d1c32c7e8afe9f511] No values for this collection, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40010, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40011, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40012, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40013, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40014, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40015, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40016, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40017, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40018, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40019, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40020, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40021, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40022, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 40023, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:511: exec(): [9f3d1c32c7e8afe9f511] Beginning ruleset 41000_sqli, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41001, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41002, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41003, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41004, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41005, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 41005, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is 4, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] storage.lua:51: set_var(): [9f3d1c32c7e8afe9f511] Setting TX:anomaly_score to 10, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is SQL Tautologies, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:41: [9f3d1c32c7e8afe9f511] Score isn't a thing anymore, see TX.anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41006, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41007, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41008, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41009, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41010, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41011, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41012, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41013, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41014, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key COOKIES|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41015, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 41015, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is 4, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] storage.lua:51: set_var(): [9f3d1c32c7e8afe9f511] Setting TX:anomaly_score to 14, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is SQL Injection character anomaly - ARGS, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:41: [9f3d1c32c7e8afe9f511] Score isn't a thing anymore, see TX.anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41016, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41017, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41018, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41019, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41020, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41021, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41022, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41023, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41024, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41025, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41026, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41027, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41028, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41029, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41030, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41031, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41032, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41033, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41034, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41035, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 41036, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|uri_decode, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:511: exec(): [9f3d1c32c7e8afe9f511] Beginning ruleset 42000_xss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42001, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42002, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:217: _do_transform(): [9f3d1c32c7e8afe9f511] doing transform of type html_decode on collection value x, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] transform.lua:108: _do_transform(): [9f3d1c32c7e8afe9f511] html decoded value is x, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:217: _do_transform(): [9f3d1c32c7e8afe9f511] doing transform of type html_decode on collection value <script>alert();</script>, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] transform.lua:108: _do_transform(): [9f3d1c32c7e8afe9f511] html decoded value is <script>alert();</script>, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:217: _do_transform(): [9f3d1c32c7e8afe9f511] doing transform of type compress_whitespace on collection value x, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:217: _do_transform(): [9f3d1c32c7e8afe9f511] doing transform of type compress_whitespace on collection value <script>alert();</script>, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42003, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42004, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42005, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42006, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42007, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42008, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42009, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42010, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42011, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42012, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42013, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42014, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42015, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42016, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42017, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42018, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42019, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42020, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42021, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42022, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42023, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42024, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42025, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42026, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42027, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42028, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42029, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42030, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42031, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42032, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42033, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42034, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42035, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42036, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42037, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42038, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42039, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42040, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42041, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42042, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42043, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 42043, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is 4, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] storage.lua:51: set_var(): [9f3d1c32c7e8afe9f511] Setting TX:anomaly_score to 18, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is XSS (Cross-Site Scripting), client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:41: [9f3d1c32c7e8afe9f511] Score isn't a thing anymore, see TX.anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42044, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42045, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42046, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42047, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42048, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42049, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42050, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42051, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42052, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42053, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42054, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42055, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42056, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42057, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42058, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42059, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 42059, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is 4, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] storage.lua:51: set_var(): [9f3d1c32c7e8afe9f511] Setting TX:anomaly_score to 22, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is XSS (Cross-Site Scripting), client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:41: [9f3d1c32c7e8afe9f511] Score isn't a thing anymore, see TX.anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42060, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42061, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42062, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42063, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42064, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42065, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42066, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42067, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42068, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42069, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 42069, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is 4, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] storage.lua:51: set_var(): [9f3d1c32c7e8afe9f511] Setting TX:anomaly_score to 26, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is XSS (Cross-Site Scripting) - HTML Tag Handler, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:41: [9f3d1c32c7e8afe9f511] Score isn't a thing anymore, see TX.anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42070, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42071, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42072, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42073, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42074, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42075, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42076, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 42076, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is 4, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] storage.lua:51: set_var(): [9f3d1c32c7e8afe9f511] Setting TX:anomaly_score to 30, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is XSS (Cross-Site Scripting) - JS Fragments, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:41: [9f3d1c32c7e8afe9f511] Score isn't a thing anymore, see TX.anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42077, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42078, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42079, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42080, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42081, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42082, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42083, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 42083, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is 4, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] storage.lua:51: set_var(): [9f3d1c32c7e8afe9f511] Setting TX:anomaly_score to 34, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is XSS (Cross-Site Scripting) - IE Filter, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:41: [9f3d1c32c7e8afe9f511] Score isn't a thing anymore, see TX.anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42084, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42085, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42086, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42087, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42088, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42089, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42090, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42091, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42092, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42093, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42094, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42095, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42096, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 42097, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|html_decode,compress_whitespace, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:511: exec(): [9f3d1c32c7e8afe9f511] Beginning ruleset 90000_custom, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90001, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|user-agent|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90002, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90003, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 2, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90005, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 3, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90008, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 2, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90010, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|specific|user-agent|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90011, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 2, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90013, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 3, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90016, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 3, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90019, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_ARGS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90020, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_HEADERS|all|1|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 1, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90021, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key URI|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:263: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache hit!, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset 3, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 90024, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key REQUEST_BODY|keys|1|lowercase, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:250: _process_rule(): [9f3d1c32c7e8afe9f511] Collection cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:279: _process_rule(): [9f3d1c32c7e8afe9f511] No values for this collection, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:350: _process_rule(): [9f3d1c32c7e8afe9f511] Returning offset nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:511: exec(): [9f3d1c32c7e8afe9f511] Beginning ruleset 99000_scoring, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:539: exec(): [9f3d1c32c7e8afe9f511] Processing rule 99001, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:247: _process_rule(): [9f3d1c32c7e8afe9f511] Checking for collection_key TX|specific|anomaly_score|nil, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:260: _process_rule(): [9f3d1c32c7e8afe9f511] Forcing cache miss, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:228: _parse_collection(): [9f3d1c32c7e8afe9f511] Parse collection is getting a specific value: anomaly_score, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:283: _process_rule(): [9f3d1c32c7e8afe9f511] Parsing dynamic pattern: %{SCORE_THRESHOLD}, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is 5, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] waf.lua:301: _process_rule(): [9f3d1c32c7e8afe9f511] Match of rule 99001, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is Request score greater than score threshold, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] util.lua:150: parse_dynamic_value(): [9f3d1c32c7e8afe9f511] Parsed dynamic value is 34, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] storage.lua:117: persist(): [9f3d1c32c7e8afe9f511] Persisting storage type dict, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
2017/05/12 09:55:23 [] 5148#0: *1 [lua] actions.lua:26: [9f3d1c32c7e8afe9f511] Rule action was DENY, so telling nginx to quit, client: 200.23.36.2, server: localhost, request: "GET /?x=%3Cscript%3Ealert();%3C/script%3E HTTP/1.1", host: "173.255.197.21"
p0pr0ck5 commented 7 years ago

@rm3nchaca thanks! Can you ensure that you have waf:exec() or waf:write_log_events() in your log_by_lua handler?

rm3nchaca commented 7 years ago

I've just follow the example in the README

log_by_lua_block {
    local lua_resty_waf = require "resty.waf"
    local waf = lua_resty_waf:new()
    waf:exec()
}
p0pr0ck5 commented 7 years ago

Ok, in that case, there must be something in the log handler from this request, unless you have an error_page handler for 403 requests, which would indeed prevent the log_by_lua handler from executing. Do you have an error_page 403 directive defined?

rm3nchaca commented 7 years ago

I have this one:

error_page   500 502 503 504 403  /50x.html;
        location = /50x.html {
            root   html;
        }

Also tried calling the waf in there. The only way I get it working is changing the line 171 of waf.lua to:

if ctx.phase == 'log' or ctx.phase == 'access' then

Thanks!

p0pr0ck5 commented 7 years ago

Two options:

rm3nchaca commented 7 years ago

Thanks! It woks perfect removing the 403. Tried the hook_action, but then I got no error at all.. So, what option do you recommend if I want a customized "forbidden" page?

Thanks a lot, this WAF looks awesome! Congratulations!

p0pr0ck5 commented 7 years ago

hook_action takes a function, so it's up to you to write the proper function for your needs. if all you want to do is write the error log, this might look something like:

access_by_lua_block {
            local deny_override = function(waf, ctx)
                ngx.log(ngx.INFO, "Overriding DENY action")

                -- write the log events ourself, if we have an error_page 403 defined
                -- note that we define two params 'true' and 'ctx', which use the existing
                -- waf object instead of re-fetching from ngx.ctx
                waf:write_log_events(true, ctx)

                -- exit with a 403
                ngx.exit(ngx.HTTP_FORBIDDEN)
            end

            -- override the DENY action with the function defined above
            waf:set_option("hook_action", "DENY", deny_override)
        }
}

I haven't tested this, but this should give you an idea of how this works.

rm3nchaca commented 7 years ago

Tested! It works!!

Thanks a lot! I owe you a (beer || cofee || coke) ;)

p0pr0ck5 commented 7 years ago

Great, glad to hear it's working! Yeah, I thought to detail out this gotcha (because error_page overrides the request context, the configured log_by_lua phase doesn't make sense, and the ngx.ctx table is override iirc in that context). I'll toss up a wiki page on this soon and reference this bug. In the meantime, let me know if anything comes up that seems off.