Security errors can pop up that way (I see a few funky characters like ~ and %). I thought we'd got all of them by now, but you never know until one gets flagged. Easiest way to find it is usually to grep the logs with the IP of the poster, which will give you the security rule, then whitelist the rule since it's part of the day-to-day.