If you run a "ps faux" look for any processes by that name, or any suspicious PHP processes (or other suspect processes forked off of httpd or php).
Then Run
lsof -i :80
If you run a "ps faux" look for any processes by that name, or any suspicious PHP processes (or other suspect processes forked off of httpd or php).
Then Run
lsof -i :80