I could guest - thats the only tool I have to do any analysis. I've raise this with HP for further comment and also I am seeing users with ip 0.0.0.0
See screenshots – we are still seeing 0.0.0.0 ips and still seeing 85% success rate. Let me know
Logs etc are shared here
HAR-AP-01 2 BC:4C:C4:01:F4:76 0.0.0.0 N/A Ricardo-Gues...
ts Authorized 00:02:19 -54 -82 28 N Disassociate
HAR-AP-02 1 A4:C3:61:4B:EC:00 0.0.0.0 N/A Ricardo-Gues...
ts Authorized 00:01:22 -60 -92 32 N Disassociate
HAR-AP-02 2 A4:C3:61:4B:EC:00 0.0.0.0 N/A Ricardo-Gues...
ts Authorized 00:01:52 -61 -84 23 N Disassociate
HAR-AP-02 2 A4:C3:61:14:CB:11 0.0.0.0 N/A Ricardo-Gues...
ts Authorized 00:05:51 -69 -84 15 N Disassociate
HAR-AP-02 1 88:1F:A1:4C:F7:D0 0.0.0.0 N/A Ricardo-Gues...
ts Authorized 00:01:38 -80 -92 12 N Disassociate
HAR-AP-04 2 80:71:7A:00:3E:D9 0.0.0.0 N/A Ricardo-Gues...
ts Authorized 00:05:55 -75 -82 7 N Disassociate