Hi,
did you try with Audit feature? You can log login failure attempts.
Example from SCI - Audit view
Client 1368 failed to get authorization. Name [
IWS], type [InteractionWorkspace ], user [<USER NAME>], address [CLIENT IP ADDRESS:49933]. Reason : Authentication failed, user name or password is incorrect
Than you can create a custom report
I hope this help.
Tschüss
Gennaro