Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Andy Burns <usenet@andyburns.uk>
Newsgroups: comp.os.linux.misc
Subject: Re: Spurious ARP entries...
Date: Sat, 12 Jul 2025 11:41:59 +0100
Lines: 13
Message-ID: <mdesfqFskgeU2@mid.individual.net>
References: <104tdg2$22i42$14@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net lyLICVXI478mP/vLK+skMA1nezf6DCzAdInZt9Jv3SbxQ1gGVT
Cancel-Lock: sha1:dI9Bso5B3WM7jdSIcDVDCE5OGM8= sha256:x4YKBoFmca2D7ZtkrU52yMhVxt+gLxXkHg8/d1tsfho=
User-Agent: Mozilla Thunderbird
Content-Language: en-GB
In-Reply-To: <104tdg2$22i42$14@dont-email.me>
Xref: csiph.com comp.os.linux.misc:69517

The Natural Philosopher wrote:

> ? (192.168.0.28) at <incomplete> on eno1
> 
> The incomplete entries are for IP addresses I simply never have used.
> 
> Anyone recognise this behaviour?
> 
> After clearing, at least one is back...

Something scanning the subnet?