Data from known "unknown" device

From the AP log:

08:51:57 wireless,info Kenepuru: data from unknown device 00:02:6F:48:23:A0, sent deauth
08:51:57 wireless,info Kenepuru: data from unknown device 00:02:6F:48:23:A0, sent deauth
08:51:57 wireless,info Kenepuru: data from unknown device 00:02:6F:5E:16:4D, sent deauth
08:51:57 wireless,info Kenepuru: data from unknown device 00:02:6F:5E:16:4D, sent deauth
08:51:57 wireless,info Kenepuru: data from unknown device 00:02:6F:48:23:A0, sent deauth
08:51:57 wireless,info Kenepuru: data from unknown device 00:02:6F:48:23:A0, sent deauth
08:51:57 wireless,info Kenepuru: data from unknown device 00:02:6F:48:23:A0, sent deauth
08:51:57 wireless,info Kenepuru: data from unknown device 00:02:6F:48:23:A0, sent deauth
08:51:58 wireless,debug Kenepuru: 00:02:6F:5E:16:4D attempts to associate
08:51:58 wireless,debug Kenepuru: 00:02:6F:5E:16:4D in local ACL, accept
08:51:58 wireless,info 00:02:6F:5E:16:4D@Kenepuru: connected
08:52:02 wireless,debug Kenepuru: 00:02:6F:48:23:A0 attempts to associate
08:52:02 wireless,debug Kenepuru: 00:02:6F:48:23:A0 in local ACL, accept
08:52:02 wireless,info 00:02:6F:48:23:A0@Kenepuru: connected


At 08:51:57 two MAC’s xx:4D and xx:A0 were unknown devices being refused. At 08:52:02 both MACs were recognised as being in the access list (as they are) and accepted. In any case ‘default authenticate’ is allowed on this interface. This is happening over and over.

AP is an RB600 running RouterOS v5.7

Any ideas?

Blackberry devices, by any chance?

I’m also getting this, and yes it’s Blackberry MAC addresses units that appear in the log. Can anyone shed any light on why the BB units do this?

In my case these are legitimate Mikrotik CPEs which are trying to connect and are listed in the Access list, yet are still initially being rejected as “unknown devices”.