topic Re: ARP Cache Poisoning Attack - EE Router in Broadband & Landline

ARP Cache Poisoning Attack - EE Router

jaylaa16 — Fri, 07 Feb 2025 10:23:53 GMT

Hello,

Has anyone had any issues with their EE router throwing an "ARP Cache Poisoning Attack" via ESET Endpoint Security? I've always been with BT with no issues, as soon as I moved over to EE my ESET keeps throwing this error up. I've got an EE booster connected to a network switch upstairs, when I work upstairs I don't notice the error, it only happens when I'm working downstairs where I'm connected to the router via WiFi. When the error comes up, my phone seems to drop off the WiFi then reconnect.

I spoke to technical support a few weeks ago and they've never come across this before, so were unable to help really.

Any assistance would be appreciated.

Re: ARP Cache Poisoning Attack - EE Router

Lesley_W — Fri, 07 Feb 2025 13:45:58 GMT

Hi @jaylaa16

Welcome to our community.

I'm sorry our technical team couldn't help with this, it does seem to be specific to ESET and not something our teams will have come across. Have you been able to check with ESET to see if they can shed any light on this error?

Lesley

Re: ARP Cache Poisoning Attack - EE Router

jaylaa16 — Fri, 07 Feb 2025 14:18:46 GMT

Hello,

I've spoken to my IT Team, they've basically advised to check with EE, as something is causing this locally. It's coming from the router (192.168.1.254) by the looks of it. As mentioned, this never happened when I was on BT directly, only since going to EE.

Re: ARP Cache Poisoning Attack - EE Router

MarkF1812 — Mon, 10 Feb 2025 12:19:10 GMT

I have the same issue - as does one of my colleagues.

Both using EE and ESET, all working without issue until 21/1/25. Error messages now come constantly, but only when connected to EE (other broadband routes do not flag issues).

IT team advise that it is EE as it is coming from the router and confirm that it does not appear to be a ESET issue.

Please advise solution.

Re: ARP Cache Poisoning Attack - EE Router

jaylaa16 — Mon, 10 Feb 2025 16:23:54 GMT

Hello Mark,

Thank you for your response - Yeah as mentioned I switched from BT to EE (it never happened when I was with BT) and it started happening the last month or so.

I've spoken to a technical advisor at EE who's never come across this issue and was unable to help but advised me to speak to my internal IT team. Not sure where to go with it, as it could be fine for a couple of hours then next minute my ESET spams "ARP cache poisoning attack". I can only assume it's an EE router issue.

Thanks

Re: ARP Cache Poisoning Attack - EE Router

bobpullen — Tue, 11 Feb 2025 21:32:26 GMT

@jaylaa16 - did you have extenders with BT and were they configured in the same way? I doubt it's anything to be too concerned about and could well be ESET being a little over-zealous. Seems there's a fair few people questioning similar behaviour out there.

If it's that much of a nuisance, perhaps it's worth looking to see if you can add an exception for the alert.

@MarkF1812 wrote:
I have the same issue - as does one of my colleagues.
Both using EE and ESET, all working without issue until 21/1/25....

This is interesting. Anything happen around that time? Firmware update maybe?

Re: ARP Cache Poisoning Attack - EE Router

romchip — Wed, 12 Mar 2025 10:53:24 GMT

Hi. Just adding that I have this issue appearing in my ESET logs too - certainly back to 24th Feb.

Re: ARP Cache Poisoning Attack - EE Router

PT6670 — Fri, 11 Apr 2025 10:07:07 GMT

Hi everyone. I have just moved to a new property and joined EE. With Virgin at previous property.

My wife's laptop which is running EST is giving the same message regarding ARP Cache Poisoning Attack whereas my work laptop that is protected using Cyber Security package from our IT provider is not picking up any such messages.

I don't have any extenders installed.

My wife is getting annoyed by the message keep popping up... would be great if EE could actually do some digging on behalf of users to try and resolve this as it is not really ideal to be creating exceptions in my opinion...

Re: ARP Cache Poisoning Attack - EE Router

JimM11 — Fri, 11 Apr 2025 12:20:46 GMT

@PT6670 Have a look see on the Eset Forum.

Searched for 'ARP poisoning' in All Content

Re: ARP Cache Poisoning Attack - EE Router

RobinFindlay — Thu, 02 Oct 2025 12:02:57 GMT

Hi, just added a new EE booster yesterday and am now getting this error flagging up with ESET.
ARP Cache Poisoning attack

Previous to that I didn’t get any error messages from EE so it must be the latest booster.

Can EE technical team please give us an update about what they’ve done to stop this problem and do it quite quickly because people have been reporting this problem on here since January 2025

Re: ARP Cache Poisoning Attack - EE Router

JimM11 — Thu, 02 Oct 2025 12:04:42 GMT

@RobinFindlay Turn the booster off, see if it goes away!

Re: ARP Cache Poisoning Attack - EE Router

RobinFindlay — Thu, 02 Oct 2025 13:59:42 GMT

I changed my ESET settings instead

[Mod Edit: Removed email signature containing personal information]