The first thing you should do is start logging the attacks. Once you've got a hefty log with the person's IP address or addresses, and a log of the what attacks the person has been using, you should contact appropriate people in law enforcement.

Remember, don't do anything yourself. If you fight back, you are just as guilty as the guy who's trying to hack you. Let the law enforcement deal with him, and you'll be better off.