Can you check for the following in /usr/local/apache/logs/error_log location?
Code:
grep -i maxclient /usr/local/apache/logs/error_log
Additionally, rather than restart the service, see if it is still running with a ps aux on the processes. If it is, then perform the following netstats to see if it might be a denial of service attack:
Code:
netstat -an | grep :80 | wc -l
netstat -an | grep :80 | grep -i syn
The first command counts the number of port 80 connections on the machine for httpd; the second command will list the number of SYN_RECV connections on port 80. A SYN_RECV state is a synflood connection normally, which is used to try to prevent Apache from being accessible (it will hang but be running) by attackers.