Hey, thank you for your answer.
I got a dedicated server via server2sale.com
I have no images uploaded at WordPress, no plugins, no contact form (actually nothing besides news), I even upload news images on tinypic.com
Maybe indeed spammers are the problem? I delete tons of spam from comments, but how could they attack my site when comments are offline?
oh, and I’m using the latest WP version with no plugins, only wp super cache