This can be a lot of thing.

Can you give me the input of this command *via SSH /root* and your servers specs?

Code: 
netstat -nt | grep ':80 ' | awk '{print $6}' | sort | uniq -c