I'm guessing this is a modsec question, but please let me know if I'm in the wrong place.
We have the problem of hackers trying to submit forged payment requests. They return the url /checkout?payment_failed=1 when their attempts fails.
How can we block their ip IF they visit that url more than 3 times?
Many thanks in advance.