I would dig deep into your phpBB settings and set the IP *****ing settings to the strictest possible. Although, if "she" is smart enough that person is probably masking their identity, and going through a number of different servers/machines, but, if they have underestimated your power, then you can probably catch this "she hacker". If they have gone through multiple machines to attack your website, then the IP address will come up of the server/machine they went through, such as a proxy server, then the owner of the proxy server will have to check their logs, to see if any connections were made to your site from their server, but again, if they are smart they have covered their *****s and altered the servers/machines logs. Best of luck with this problem... also you might want to get a host that utilizes linux/unix operating systems. As windows provides virtually no security whatsoever.
