To ACP of course, the attacks is killed away, I guess they do DDos only now.
It seems it was security holes in the php and mysql on the previous host.
I moved to new one and everything is fine so far.