For about a couple of weeks now, I have been receiving this email:
Someone requested that the password be reset for the following account:
Username: *****
If this was a mistake, just ignore this email and nothing will happen.
To reset your password, visit the following address:
<https://wordpress.com/wp-login.php?action=rp&key=JL47nqLfSTATxWwZ7A2t&login=****>
It’s from [email redacted] (I just placed the asterisks to replace the user name here).
Is there anything I can do other than keep changing my password? Can wordpress block the hacker somehow? This is really freaking me out... :-(