He wants us to show some sympathy.Why are you posting this is the News and Announcements forum?
A good alternative would be to use Wordfence + WPS Hide Loginxmlrpc.php need to be block and login page need to install google reCaptcha
many spammer keep attack wordpress... same as mine
by the way don't call them hacker... they are lamer use script keep guess password website