You might have a city on a World Wonder island. Even in Vacation Mode, it is possible to attack those cities. On a Domination world it is possible to get attacked during Vacation Mode when your alliance has started Last Stand.