We started to have this issue on multiple sites and figured out it started after turning on mod_evasive in WHM