[mistwang]

It is a unix domain socket associated with the PHP suEXEC daemon created when LSWS starts.
You must have some kind of cron job removing /tmp/lshttpd/lsphp5.sock. it should not be touched.
Or running out of space on /tmp partition.