I understand that, but the attacker can’t do the same if the attempt are not showing, they can count after how many tries they were blocked and to use it as you said on other IP’s?
Also, other plugins like “Limit Login Attempts Reloaded” are showing the attempts number, how do they protect from these attacks about which you said?
Regarding block message, I apologize, I don’t know how I missed it in the block page.
