Hello
check transaction SOST around same timings when these emails are triggered . check which user is sending the email - WF-batch
check workflow log in transaction swi1 around same timings .
check if the emails are triggered programmatically from user exit or enhancement implementation based in some conditions .
Regards
Sandy