Well, generally when I see a 406 error it's related to mod_security, an apache module which does a load of checks to ensure no known malformed url exploits can "own" a server; it'd make sense that this would be occouring for you in some areas, but the image area i figured it would likely have been a proxy server deriving an error.
what do your weblogs say on the server at these timeframes?