Check your cron jobs too, including those run under non-root accounts.