hmm... mod_bandwidth doesn't fit my demand, and mod_evasive doesn't exist. but nevertheless thanx for your reply. i found BruteBan.pm - which is rather dull, but brought me to the point: i should be patient and wait until the request object is present. maybe a PerlPostReadRequestHandler would do.