Solved Non existing database user doing requests??

[Richard G]

I'm looking in my /var/log/mysql/mysqld.log file and see this happening 21 times per minute, every 15 minutes.

2021-02-08  0:00:01 140223723419392 [Warning] Access denied for user 'admin_wilmgd'@'localhost' (using password: YES)
2021-02-08  0:00:02 140223722804992 [Warning] Access denied for user 'admin_wilmgd'@'localhost' (using password: YES)
2021-02-08  0:00:02 140224016557824 [Warning] Access denied for user 'admin_wilmgd'@'localhost' (using password: YES)
2021-02-08  0:00:02 140223724340992 [Warning] Access denied for user 'admin_wilmgd'@'localhost' (using password: YES)
2021-02-08  0:00:02 140224017479424 [Warning] Access denied for user 'admin_wilmgd'@'localhost' (using password: YES)
2021-02-08  0:00:02 140223724033792 [Warning] Access denied for user 'admin_wilmgd'@'localhost' (using password: YES)

Now the odd thing. The database user admin_wilmgd is non existing. Even if I look into /var/lib/mysql there is nothing there which even starts with admin.

I do have munin running, which does not display mysql anymore, some issue there too, but that is configured like:

[mysql*]
user root
env.mysqluser da_admin
env.mysqlpassword xxxxxxxxxxxxxxx

Never had this odd issue before. How can I find such non-existing user?

 

[Richard G]

Fixed. Was an old cronjob from an admin account which transferred to this server as a useraccount. The account still had a cronjob which was calling mysql.