My server has a load average of 16.80, 15.82, 13.35 right now.. When I stop qmail and kill the qmail processes the load drops to below 1.. Then I start it up again and it jumps back up. Does this mean qmail is being attacked? Maybe a form on the server is being attacked? I have plesk on the server.

I would really like to get this resolved. Any ideas on how to track down the culprit script / problem?

How does your mail queue look? Do you have some process that scans mail that might be doing so while qmail is running then stopping when you stop qmail?

SpamAssassin (spamd)
Clam AV (clamav)

Anything?