Are you referring event 201 on ZD or auth server?
For the controller it is just a authentication failure. It depends upon the log level set on ZD, If it is set to Show more, you will be able to see authentication failure in the ZD event logs with client's MAC address.
Go to ZD >> System >> system settings >> Log settings >> "show more".
Syamantak Omer | Community moderator | Staff TSE | CWNA | CCNA | RASZA | RICXI | Follow me at https://linkedin.com/in/syamantak-omer-5949b6124