Did you check the cronjobs in crontab and Magento to make sure this is
not any job?
Does this weird server behaviour slowdown your site? Im not sure, but
this can also be an Slowloris DDos attack, where a lot HTTP connections
open and because of a bug doesnt get closed. Maybe I gave you a hint with