maybe the server is under sql-injection attack -- too many "Sleep" in sql process list.
or something like that -- because of wrong php code.
maybe you can simulate the behavior
1. in a test php script, say test.php, connect to mysql, and run "sleep" only
2. benchmark test.php, while access...