IS there a SloLoris attacking going on? Do you have CSF installed? Add this to your csf.conf

CONNLIMIT = 80;75,443;75,21;50
PORTFLOOD = 80;tcp;50;1,443;tcp;50;1