I checked the core rules set in the mod-security but it's didn't contain the rules related to Brute-Force Attack!!! Did anyone know how to write the rules or the existing rules for this kind of Attack!
Thanks in advanced,
It's a better idea to have some daemon monitoring the logs and taking action. Fail2Ban works wonders for me. Alternatives exist.
Check is post: http://www.dongit.nl/tech/modsecurity-brute-force-protection