We're using mod_security and we have currently issues with some bots.
I would like to block IP Address that visited 404 pages more than 10 times in a minute.
How can this be done? How can I poll the 404 return codes?
How can I count the error 404 return codes in phase 3?
RESPONSE_STATUS may not work as expected in embedded mode, as Apache sometimes handles certain requests differently, and without invoking ModSecurity (all other modules).
How can I get the RESPONSE_STATUS every time for sure? phase 5?