anchor.diff:  # - Request Threshold: request # threshold to trigger a burst
   # - Block Period: temporary block timeout
   #
  -#SecAction \
  +SecAction \
     "id:'900015', \
     phase:1, \
     t:none, \
  
positive.code: #
  # - Producer: ModSecurity for Apache/2.7.0-rc1 (http://www.modsecurity.org/); OWASP_CRS/2.2.4.
  #
  # Ref: https://sourceforge.net/apps/mediawiki/mod-security/index.php?title=Reference_Manual#SecComponentSignature
  #
  SecComponentSignature "OWASP_CRS/2.2.6"
  
  
  #
  
negative.code:   t:none, \
    initcol:global=global, \
    initcol:ip=%{remote_addr}_%{tx.ua_hash}, \
    setvar:tx.real_ip=%{remote_addr}, \
    nolog, \
    pass"
  
  