Have you looked at your access_logs (if you don'tknow where they are, ask your host) to see if someone is doing this to you? Or, have you looked in your Control Panel logs to see if a mod is doing it? Or see if a script is doing it? Have you looked on your server to see if there are any files on there that shouldn't be there?