Finding user attempting to connect, but authentication fails too many times in a row

[neil_ticktin_io]

Hi,

Our Unleashed logs are littered with entries similar to this:

User[70:b3:06:xx:xx:xx] fails authentication too many times in a row when joining WLAN[ZYX-GA] at AP[AP-2-00-GA-1295@24:79:2a:xx:xx:xx]. User[70:b3:06:xx:xx:xx] is temporarily blocked from the system for [30 seconds].

From the timestamps, it appears to be an individual's phone that may have at one point known a Wi-Fi password, or somehow access the WLAN maybe when we were on a ZoneDirector prior to moving to Unleashed a few weeks ago. Since the user is not a device we manage, and isn't successfully accessing, I can't find an IP for it, or any other information ... I just know it's an Apple device from a MAC address lookup.

Any idea how to find info on this device?  or how to keep it from destroying the effectiveness of logs since it's continually trying to log into the Wi-Fi network? 

Thanks!

Neil