If anyone have a similar problems... see the debug log of mod_security: "[/stats/index.html][1] Access denied with code 404 (phase 4). Pattern...
Separate names with a comma.