ssh in, check out top or htop and see if something's using the cpu, what iowait is etc.
Is it a dedi, vps, what?
If it's increasing at a specific time, do you have any cron jobs set for that time?
Or if it's a VPS, perhaps others sharing the same physical hardware do.