LAN Events
What the fabric sensor hears on the peering LAN. Neighbor-discovery anomalies: a new MAC appearing on an existing IP, or a single MAC claiming many IPs (proxy-ARP); events tagged “reflection” are benign re-flooding after a fabric flap. LAN-hygiene detections: a participant MAC sourcing a protocol that does not belong on an exchange (IPv6 router advertisements, DHCP, IGP hellos, discovery protocols…), toned by severity, with the fix.
22 events
| Opened | Kind | Subject | Participant | Detail | Count | Status |
|---|---|---|---|---|---|---|
| 2026-10-15 21:49 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
active
last 1 hour, 31 minutes ago
|
| 2026-10-14 21:04 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 1 day, 2 hours ago
|
| 2026-10-12 07:30 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 3 days, 15 hours ago
|
| 2026-10-11 18:15 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 4 days, 5 hours ago
|
| 2026-10-08 05:55 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 62.115.198.57 sender 216.218.192.179
|
6 |
closed
last 1 week ago
|
| 2026-10-05 20:41 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 62.115.198.57 sender 185.121.25.254
|
18 |
closed
last 1 week, 3 days ago
|
| 2026-10-05 08:40 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 1 week, 3 days ago
|
| 2026-10-04 16:59 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 1 week, 4 days ago
|
| 2026-10-03 18:11 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 1 week, 5 days ago
|
| 2026-09-30 21:33 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 2 weeks, 1 day ago
|
| 2026-09-29 05:06 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
12 |
closed
last 2 weeks, 2 days ago
|
| 2026-09-28 14:57 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
9 |
closed
last 2 weeks, 3 days ago
|
| 2026-09-27 18:33 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 2 weeks, 4 days ago
|
| 2026-09-25 01:02 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 2 weeks, 6 days ago
|
| 2026-09-22 01:22 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 3 weeks, 2 days ago
|
| 2026-09-18 21:25 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 3 weeks, 6 days ago
|
| 2026-09-16 17:02 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.0
|
1 |
closed
last 4 weeks, 1 day ago
|
| 2026-09-14 04:51 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 1 month ago
|
| 2026-09-13 04:45 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 1 month ago
|
| 2026-09-10 07:23 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 185.121.25.254
|
3 |
closed
last 1 month ago
|
| 2026-09-03 01:44 |
foreign_arp
warning
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
ARP for a non-IX network
sender 216.218.192.179 sender 185.121.25.254
|
35896 |
closed
last 1 month, 1 week ago
|
| 2026-09-03 01:44 |
ipv6_rs
info
|
98:03:9b:13:e8:19 | AS52025 ParadoxNetworks Limited |
IPv6 Router Solicitation
|
1012 |
active
last 0 minutes ago
|
foreign_arp
warning
active
last 1 hour, 31 minutes ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-10-15 21:49
Count 3
foreign_arp
warning
closed
last 1 day, 2 hours ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-10-14 21:04
Count 3
foreign_arp
warning
closed
last 3 days, 15 hours ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-10-12 07:30
Count 3
foreign_arp
warning
closed
last 4 days, 5 hours ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-10-11 18:15
Count 3
foreign_arp
warning
closed
last 1 week ago
Detail
ARP for a non-IX network
sender 62.115.198.57sender 216.218.192.179
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-10-08 05:55
Count 6
foreign_arp
warning
closed
last 1 week, 3 days ago
Detail
ARP for a non-IX network
sender 62.115.198.57sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-10-05 20:41
Count 18
foreign_arp
warning
closed
last 1 week, 3 days ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-10-05 08:40
Count 3
foreign_arp
warning
closed
last 1 week, 4 days ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-10-04 16:59
Count 3
foreign_arp
warning
closed
last 1 week, 5 days ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-10-03 18:11
Count 3
foreign_arp
warning
closed
last 2 weeks, 1 day ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-09-30 21:33
Count 3
foreign_arp
warning
closed
last 2 weeks, 2 days ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-09-29 05:06
Count 12
foreign_arp
warning
closed
last 2 weeks, 3 days ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-09-28 14:57
Count 9
foreign_arp
warning
closed
last 2 weeks, 4 days ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-09-27 18:33
Count 3
foreign_arp
warning
closed
last 2 weeks, 6 days ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-09-25 01:02
Count 3
foreign_arp
warning
closed
last 3 weeks, 2 days ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-09-22 01:22
Count 3
foreign_arp
warning
closed
last 3 weeks, 6 days ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-09-18 21:25
Count 3
foreign_arp
warning
closed
last 4 weeks, 1 day ago
Detail
ARP for a non-IX network
sender 185.121.25.0
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-09-16 17:02
Count 1
foreign_arp
warning
closed
last 1 month ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-09-14 04:51
Count 3
foreign_arp
warning
closed
last 1 month ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-09-13 04:45
Count 3
foreign_arp
warning
closed
last 1 month ago
Detail
ARP for a non-IX network
sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-09-10 07:23
Count 3
foreign_arp
warning
closed
last 1 month, 1 week ago
Detail
ARP for a non-IX network
sender 216.218.192.179sender 185.121.25.254
Check for a VLAN leak / bridge / wrong subnet configured on the IX-facing interface
Opened 2026-09-03 01:44
Count 35896
ipv6_rs
info
active
last 0 minutes ago
Detail
IPv6 Router Solicitation
Cisco: no ipv6 nd autoconfig default-routeLinux: net.ipv6.conf.<ix>.accept_ra=0 and no autoconf on the IX interface
Opened 2026-09-03 01:44
Count 1012