Hey eLvs,
I'd suggest to try tracking them down by looking at the mac address table and see if you can identify them physically.
Alternatively, if you are using an MX, the ARP table may give you an idea of the IP address, which hopefully you'll be able to recognise.
Using an OUI Lookup The first one seems to be a printer, but there are a few of them that do not resolve on OUI Lookup. It is possible, if you have for example mobile phones in your environment, that the mac randomisation feature on the phone may be active and therefore generating a new mac address every time they connect.
The evil path is for you to apply a blacklist group policy on the client, and then see who comes to complain 😜
Let us know how you get on!
Giac
Please keep in mind that what I post here is my personal knowledge and opinion. Don't take anything I say for the Holy Grail, but try and see!
Appreciate who helps and be respectful of every opinion and every solution offered.
Share the love, especially the Meraki one!