Similar thing happening to me. Spambots are hitting my blog through the trackback function. I disabled that in my options 2 days ago but that didn’t do a damn thing! But I just got smart… I never use that so I just deleted the wp-trackback.php file from my blog!