if you have rules that generate false positives you can exlude that rule in the same userdata field:
SecRuleRemoveById xxxxxx
if you have fail2ban configured to read the modsecurity logs to ban repeat offenders make sure to unban the wrongly banned ip numbers. (ip numbers that were falsely...