I have a replicated MySQL environments were the master db gets a continuous "Aborted_connects". How can I find out what IP and what user are causing the aborted connections. There are about 500 connections created by 25 applications. I only have access to the database servers.
Changing the
log-warnings
level to 2 will give more information in the error logs. See doc. You can change it on the fly.Moreover, here is a great blog post which I've used many times to track down the bad connection attempts using tcpdumps.