You need to find out which rule (and rule file) is being triggered if any from ModSecurity Audit log.