Bad Request

Your browser sent a request that this server rejected, possibly due to security scanner restrictions.

RequestID: XGxd138AAQEAAA76O1UAAABQ

[Tue Feb 19 13:49:43 2019] [error] [client 2607:f388:1082:ffff:f4dc:451e:3b75:f52a] ModSecurity: Access denied with code 400 (phase 2). Pattern match "(.*)" at TX:981245-Detects basic SQL authentication bypass attempts 2/3-WEB_ATTACK/SQLI-REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/base_rules/modsecurity_crs_49_inbound_blocking.conf"] [line "26"] [id "981176"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15, SQLi=3, XSS=): Last Matched Message: 981243-Detects classic SQL injection probings 2/2"] [data "Last Matched Data: \\x22 - 2/1"] [hostname "wiseli.engr.wisc.edu"] [uri "/archives/The Washington Post \\"The Misguided Mathematics Of Equating Women and Men\\" - 2/19/2005"] [unique_id "XGxd138AAQEAAA76O1UAAABQ"]
[Tue Feb 19 13:49:43 2019] [error] [client 2607:f388:1082:ffff:f4dc:451e:3b75:f52a] ModSecurity: Warning. Pattern match "(?i:(?:[\\"'`\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98]\\\\s*?\\\\*.+(?:x?or|div|like|between|and|id)\\\\W*?[\\"'`\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98]\\\\d)|(?:\\\\^[\\"'`\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98])|(?:^[\\\\w\\\\s\\"'`\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98-]+(?<=and\\\\s)(?<=or|xor ..." at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "257"] [id "981243"] [msg "Detects classic SQL injection probings 2/2"] [data "\\x22 - 2/1"] [severity "CRITICAL"] [tag "WEB_ATTACK/SQLI"] [hostname "wiseli.engr.wisc.edu"] [uri "/archives/The Washington Post \\"The Misguided Mathematics Of Equating Women and Men\\" - 2/19/2005"] [unique_id "XGxd138AAQEAAA76O1UAAABQ"]
[Tue Feb 19 13:49:43 2019] [error] [client 2607:f388:1082:ffff:f4dc:451e:3b75:f52a] ModSecurity: Warning. Pattern match "(?i:(?:[\\"'`\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98]\\\\s+and\\\\s*?=\\\\W)|(?:\\\\(\\\\s*?select\\\\s*?\\\\w+\\\\s*?\\\\()|(?:\\\\*\\\\/from)|(?:\\\\+\\\\s*?\\\\d+\\\\s*?\\\\+\\\\s*?@)|(?:\\\\w[\\"'`\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98]\\\\s*?(?:[-+=|@]+\\\\s*?)+[\\\\d(])|(?:coalesce\\\\s*?\\\\(|@@\\\\w+\\\\s*?[ ..." at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "245"] [id "981249"] [msg "Detects chained SQL injection attempts 2/2"] [data "n\\x22 - 2"] [severity "CRITICAL"] [tag "WEB_ATTACK/SQLI"] [hostname "wiseli.engr.wisc.edu"] [uri "/archives/The Washington Post \\"The Misguided Mathematics Of Equating Women and Men\\" - 2/19/2005"] [unique_id "XGxd138AAQEAAA76O1UAAABQ"]
[Tue Feb 19 13:49:43 2019] [error] [client 2607:f388:1082:ffff:f4dc:451e:3b75:f52a] ModSecurity: Warning. Pattern match "(?i:(?:union\\\\s*?(?:all|distinct|[(!@]*?)?\\\\s*?[([]*?\\\\s*?select)|(?:\\\\w+\\\\s+like\\\\s+[\\"'`\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98])|(?:like\\\\s*?[\\"'`\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98]\\\\%)|(?:[\\"'`\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98]\\\\s*?like\\\\W*?[\\"'`\\xc2\\xb4\\xe2 ..." at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "235"] [id "981245"] [msg "Detects basic SQL authentication bypass attempts 2/3"] [data "\\x22 - 2/1"] [severity "CRITICAL"] [tag "WEB_ATTACK/SQLI"] [hostname "wiseli.engr.wisc.edu"] [uri "/archives/The Washington Post \\"The Misguided Mathematics Of Equating Women and Men\\" - 2/19/2005"] [unique_id "XGxd138AAQEAAA76O1UAAABQ"]

Sorry, but it appears that you may have encountered a server error. Please contact web-coewisel@cae.wisc.edu with the full contents of this error message (especially the RequestID), and we'll try and look into it.


Apache Server at wiseli.engr.wisc.edu Port 80