diff --git a/OWASP test - Sloetjes.md b/OWASP test - Sloetjes.md
index 9842d97..65171ea 100644
--- a/OWASP test - Sloetjes.md	
+++ b/OWASP test - Sloetjes.md	
@@ -10,9 +10,11 @@
 > * Monitor each login attempt, successful or not.
     > * If a login attempt fails:
         
-        > > Record the IP address, timestamp, and username.
-        > > crease the count of failed attempts for this IP address and/or username.
+        > Record the IP address, timestamp, and username.
+        > crease the count of failed attempts for this IP address and/or username.
     > * If there are more than a certain number of failed attempts in a certain timeframe from the same IP or username:
+
+
         > Use a geolocation service to identify the location of the IP.
         > Compare this location to the known or expected location of the user.
         > Check the user's permission level. Higher-risk users (like admins) may warrant tighter security measures.