Hi everyone,
I'm running a small home server with the following setup:
- Hardware: Amlogic S905X / Aml.S905x
- Armbian Linux 5.15.195-ophub
- Ubuntu 24.04 LTS (Noble)
- aaPanel Stable 8.0.5
- Nginx
- PHP
- MariaDB
- phpMyAdmin
- Docker
aaPanel version
My current aaPanel version is:
aaPanel Stable 8.0.5
Release date: 2026-07-27
The latest beta version currently shown in my panel is:
aaPanel Beta 8.21.0
Release date: 2026-08-12
I am currently staying on the Stable 8.0.5 version and have not upgraded to the beta version because this server is running production services.
The problem
My server had been running for around 46 days before I recently restarted it while troubleshooting a MariaDB-related issue.
After that, I noticed that MariaDB keeps logging this warning repeatedly:
[Warning] Aborted connection XXXXX to db: 'unconnected'
user: 'unauthenticated' host: 'localhost'
(This connection closed normally without authentication)
The warning appears almost exactly every 10 seconds.
For example:
2026-08-21 20:50:02
2026-08-21 20:50:12
2026-08-21 20:50:22
2026-08-21 20:50:32
2026-08-21 20:50:42
...
2026-08-21 21:18:51
The connection ID also keeps increasing:
10400
10403
10404
10405
10406
...
10599
The important part is that the connection is always coming from:
host: 'localhost'
user: 'unauthenticated'
db: 'unconnected'
and the connection is closed before authentication takes place.
My observation
The almost exact 10-second interval makes me suspect that some local service or process may be repeatedly attempting to connect to MariaDB.
Possible causes I am considering include:
- aaPanel or one of its background services
- a monitoring or health-check process
- PHP/PHP-FPM
- phpMyAdmin
- a cron job
- another local application
- a Docker container
- a MariaDB-related service
However, I don't know which process is actually creating these connections.
My questions
What could cause MariaDB to receive an unauthenticated connection from localhost every 10 seconds?
Is this behavior normally harmless, or could it indicate a MariaDB configuration or service problem?
What is the best way to identify which local process is opening these connections?
Has anyone experienced similar MariaDB connection behavior with aaPanel Stable 8.0.5?
Could this potentially be related to the aaPanel version, or is it more likely to be caused by another local service?
Which logs or commands would you recommend checking to identify the source?
I have not changed the MariaDB configuration yet because I don't want to make the situation worse.
I would prefer to identify the source of the connections first before changing any MariaDB settings or upgrading aaPanel.
Any advice or suggestions for safely diagnosing this issue would be greatly appreciated.
Thank you!
