yes, is normal user with correct access but he is going over the top with its logins...They're successful logins?
Perhaps just make it do a "sleep 30" or something if the previous login was too close.
good, idea, should be enough for the moment Thanks, Andre