I have Better WP Security installed and it is working really well...
The failed login attempts log regularly indicates that there are login attempts for user 'admin' - 1 every hour or so during the night. Enough to keep below the radar and not get blocked automatically!
As the plugin does not report an IP address for me to block, I installed Simple Login log, which simply logs login attempt and left it all night. By the morning, Better WP Security reported additional failed attempts BUT Simple Login Log did not..... it only has successful attempts logged!
I do not know what is going on BUT assume the Better WP Security is correct.... Can I get the IP address for failed attempts somehow?
PS - While there is no 'admin' user, I do not like idea someone trying to get into our site!