We are running Percona MySQL 5.6.30. We've had an issue where a PHP script on a different host was reporting an issue connecting to the database:
Database may be down : SQLSTATE[HY000]  Host 'x.x.x.101' is blocked because of many connection errors; unblock with 'mysqladmin flush-hosts'"
We did the flush hosts, and it resolved the issue.
When we went back to check the Percona Audit Logs for the same time, we see a number of connections at that same time, from that same host ('x.x.x.101').
I'm trying to understand how a host could be blocked, and not blocked, at the same time. :) Any ideas?