First i'd like to say that we are currently using Access Watch on our website.
And we are really pleased with the functionallity to see data and block bad traffic, and way it looks (must be the best looking Wordpress plugin ever).
However some features we would like to see are:
Don't count the "/wp-admin/admin-ajax.php" requests from logged in Wordpress admins these are just standard Wordpress requests. And are cluttering the
Access Watch requests overview.
Whitelist / Set Bot as not harmful
filter by blocked
filter by IP address