Hello AlexR
This issue looks like a device failing to access the network during LU process.
Make a trace and find out if you have during the same window many LU rejection from the same IMSI. Ghost RACH are also usually related to overlapping same bsic-bcch which inconsistency you need to check And fix if need be