I guess your users are sharing their usr/pass between themselves. Not sure but, when a duplicate username/pass reaches the router at the same time when that user is online this happens.
A couple things can cause this. Hackers can cause this by trying to duplicate a logged-in user.
The usual way is using an AP between the hotspot and your clients. All clients show as the mac of the AP. The default setting is 2 addresses per mac. So 3 clients and someone is thrown off. If you want to continue to use the AP, then you can see and change this setting here:
/ip hotspot
print detail
set X addresses-per-mac=250
This is usually caused by using clients that are bridges. The customer has several pc’s on a switch behind the client. Sometimes the customer may have their cpe plugged into a the private side of the customers linksys 4 port router. This was a big problem when I was using old Tranzeo clients who operated only as bridges, we would pre-auth the cpe based on its mac the something would be hooked in wrong or the client would use a switch instead of a router.
Is there any way of resolving this, other than added saying, “under hotspot, servers, changing to 250 addresses per mac”?
I am using a UBNT for a bridge to a seconday AP and all my clients were getting kicked off due to the above restrictions being set to 3 addresses per mac.