[CentOS] repeated local ephemeral to 80

well, first question: why don't you allow local access to port 80?
There is no reason for that.
This is httpd itself. Switch on the status page and then look for 
yourself. It's a well-known "phenomenon" since Apache 2.0 or 2.2.

Kai