I think this is sending a lot of false reports

I am getting repeated messages from the plugin thus:

12 failed login attempts (3 lockout(s)) from IP 5.188.62.76
Last user attempted: [redacted the-name-of-an-admin]
IP was blocked for 20 minutes

However, when I search:
1) My server logs – there is no trace of the IP address and
2) Login to Cloudflare and check the firewall log – there is no trace of the IP address.

I think this plugin just sends false warnings to try to increase sales?

Happy to revise my review if proven otherwise – but meanwhile, I think there is something odd going on here.