Finding user attempting to connect, but authentication fails too many times in a row

RUCKUS Community Forums are now in READ-ONLY mode while we migrate to a new platform.

You will still be able to read posts and knowledge articles, but will be unable to post new content until Go Live on the new platform Monday August 17.

Lennar Smart Home customers: please contact [email protected] for assistance during the week of August 9-17.

Hi,

Our Unleashed logs are littered with entries similar to this:

User[70:b3:06:xx:xx:xx] fails authentication too many times in a row when joining WLAN[ZYX-GA] at AP[AP-2-00-GA-1295@24:79:2a:xx:xx:xx]. User[70:b3:06:xx:xx:xx] is temporarily blocked from the system for [30 seconds].

From the timestamps, it appears to be an individual's phone that may have at one point known a Wi-Fi password, or somehow access the WLAN maybe when we were on a ZoneDirector prior to moving to Unleashed a few weeks ago. Since the user is not a device we manage, and isn't successfully accessing, I can't find an IP for it, or any other information ... I just know it's an Apple device from a MAC address lookup.

Any idea how to find info on this device? or how to keep it from destroying the effectiveness of logs since it's continually trying to log into the Wi-Fi network?

Thanks!

Neil

3 REPLIES 3