dskirk on "[Plugin: Wordfence Security] block admin user name?"

There is an option in Wordpress to do that. My guess is the hacker is then changing IP addresses. My solution to the problem was to create a list of blocked ID addressses in the .htaccess file.