Wow. I *REALLY* wish I would have known about this plugin a few weeks ago. We manage many blogs for many clients and while we have never lost a site (yet), some brute force hackers have been having a heyday on a couple of our sites...one in particular they have become extra fond of (I have no idea why, it's nothing special, primarily a lead generation site).

I use the WP Better Security plugin along with a visual captcha (and a couple .htaccess hacks of my own). The plugin is set to ban the IP after just 2 failed login attempts. So far it has blocked over 5,000 separate individual login attempts in less than 2 weeks (and the list is still growing as I type this). The plugin simply reports a "418" denial error to visitors of blocked IP's and nothing further is logged in the admin area. They've been HAMMERING on this site for days and days, non-stop. Our server access logs are endless with thousands and thousands of "418" denial errors to IP's trying to post to /wp-login.php ...the site is still holding strong.

There is an up-side to this...
The up-side is I've now accumulated the list of IP's for an elaborate global BOT-net. How wonderful it would be to the world if this IP list had been added to the BruteProtect data.

Maybe there's a way I can still make that happen.
Thanks for sharing.
-Mike