Answered in pm, part of answer here, for others:
Someone tried to attack my system after posting addnode=ip of opened wallet (without any coins).
They tried to acces files by port 80/http. They didn't compromised that system and didn't get any other acces than trying to download files by http protocol. There are no accounts opened to world, there are no opened ports that they can use out of local network (only local network connection accepted only from 2 mac addresses). That local ip's/mac's have no access to internet, so system is closed for world access.
0_o lol, who would be so stupid t o config wallet server so http has access to the data files.
Actually even better who would even bother trying that, what a random idiot.