we're using mod_security and we have currently issues with some bots.
i would like to block ips, that visited 404 pages more than 10 times in a minute.
How can this be done? How can i poll the 404 return codes?
how can i count the error 404 return codes in phase 3?
"RESPONSE_STATUS may not work as expected in embedded mode, as Apache sometimes handles certain requests differently, and without invoking ModSecurity (all other modules)."
How can i get the RESPONSE_STATUS every time for sure? phase 5?