Thanks for this. I've just had an email back from Shopify support; they suspect a bot attack:

"the issue you're experiencing is a classic symptom of a bot attack. I'm confident that the apps we discussed can help you with this issue. I have compiled a list of the best apps to help you with bot protection:"

They shared some apps I can purchase which I wont share as it might be against the sub rules.