I have an /uploads folder in my doc root that has tons of folders inside of it: 00001 00003 00004 etc., etc.
I assume these are attachments but unsure. If not, what are they?
Open one in a text editor and see what if contains; we use allowed extensions in the upload check, everything in that folder should match whatever settings are set in the control panel.