Is my site being attacked?

[encodeme]

Hi yesterday, my logs showed a 10 fold rise in activity... I can't believe its genuine.
However now in the log of page Urls its show entires such as http://****.com/ftpNYR6CQ.cgi.
Is this an attack, and if so what should I be doing?
Thanks

[CapadY]

is **** your own site ?

[encodeme]

Yes, I didn't dare advertise the domain in case of courting more problems 

[CapadY]

Is there a file called "ftpNYR6CQ.cgi" in the root of your WEBSITE ?

What's the content of that file ?

[encodeme]

No that's the worrying part. There are no obvious extra files or files ending in .cgi
It was just that my vistors count rocketed along with the bandwidth, and these .cgi refs were in the urls visited.
I'm new to all this end web problems.

[CapadY]

did you try to call that url in a browser ?

What happened ?

[encodeme]

It came up as not found.
There are 4 instanances of .cgi files all showing as not found.
Very weird.
I'll scrutinise the server logs tomorrow and see if there are any signs in there.   

[xenovanis]

Could be just a global attempt to access something. Keep an eye on it though.