Support

Your site is not being hacked, it's being attacked. There's a big difference :) Hacked means that the attacker made it through. Attacked means that the attacker got blocked by Admin Tools which is now sending you an email to let you know.

Since the attack is coming from a different IP each time you can't and don't have to do anything in particular. Even if the attacker was to guess your Super User username and password they'd still be blocked by Admin Tools. One thing you should have done anyway is making sure that you're not using an easy to guess username (like "admin") and that your password is hard to guess as well. As far as the password is concerned, I recommend using a password manager such as KeePass, 1Password, LastPass and so on to create and securely store a hard to guess password such as a 20 random character password consisting of upper- and lowercase letters, numbers and special characters. Making it harder for your login to be guessed makes it easier to protect your site against these attacks.