Why are there many connections from the server itself in netstat?

Question

linux

All day the server slows down wildly and periodically just freezes, even via ssh it does not allow you to connect.
I thought it was a DDOS attack, but according to the logs, the maximum load for the whole day was 15mbps
The load on the CPU and RAM for the whole day did not rise above 5%.
The only thing that confuses is the netstat readings.
13594 connections in the TIME_WAIT state, although there is one site with 10 people online.
All connections, judging by the IP, from the server itself.
The picture is like this.

Actually the last ip is the server itself.