Configserver ModSecurity: How to block an ip IF it hits a certain url more than N times?

Question

We have the problem of hackers trying to submit forged payment requests. They return the url /checkout?fail=1 when their attempts fails.

Using modsec, How can we bloc