Hey there

Just to explain these emails: to aide development we have the system send emails to the support address (set in the zenario_siteconfig.php file). They're designed to alert us if a visitor is browsing our sites and encounters an error.

They were never intended to be an alert that one of our sites is being probed or is under attack. However if an attacker does find something that generates an error, that can often trigger these emails.

The email you've shown there is very similar to one we sometimes see as well. It references a bit of code where we're trying to check someone's session ID is valid.

This is just a guess, but maybe this is part of a standard attack script that attacks sometimes choose to run? However we don't actually know how to reproduce the attack "in the lab" and trigger the error by our own doing.

I'm sorry that's not a definitive answer.

Useful information