Current work-around we implement on our side :
exclude the mod_qos and mod_evasive under /etc/yum.conf
exclude=mod_evasive mod_qos
Then if that package has been installed (you can confirm via rpm -qa or yum info )
yum info mod_evasive | grep -i repo
Repo : installed
From repo : epel...