Hello,
00:02:3b:08:79:b4 & a4:a1:c2:43:81:3a belong to Ericsson.
From experience, there are 2 possible causes:
1/ someone configured X.X.X.19, perhaps as secondary IP, on their kit, and this kit keeps sending gratituous ARP - possble but not very likely
2/ more likely cause - someone who owns that E/// kit , has X.X.X.19/32 static route configured and it seems this kit has "proxy-arp" ON by default. Therefore, anyone who needs to resolve X.X.X.19 IP gets two ARP responses: one from Your router, and second from that E/// kit. Due to MAC address timeouts & short-lived flooding, You are getting their ARP responses as well and that triggers syslog messages.
Unfortunately, there is nothing You can do on Your M120 to resolve this. You'd need to contact exchange operator to get this resolved.
HTH
Thx
Alex