Are there any cron jobs set for that time frame? Is it a dedicated server or shared?
If it's shared it could be a nightly back up.