My cpanel install shows bandwidth usage at around 250MB.
Bandmin and Orbit monitoring shows 10GB (way more than normal for this server).
Strange thing is my ns2.nameserver IP address is showing about half the traffic in bandmin (5GB). It normally shows almost nothing. Seems to start around 2AM (500MB per hour) and end around 6AM. Everything is normal until 1-2AM.
Any ideas on where to start? Looked through every log and found nothing odd.