This should do: Schedule it to run every 5 min. It will then add the IP for the user with wrong username or password to address list Wrong_User for 24 hour. Thanks for your script. Is it possible to modify it so the IP enters the Wrong_User list only after, for example, 3 or 5 attempts? Regards.