ARP Cache Poisoning Attack - EE Router

[jaylaa16]

Hello,

Has anyone had any issues with their EE router throwing an "ARP Cache Poisoning Attack" via ESET Endpoint Security? I've always been with BT with no issues, as soon as I moved over to EE my ESET keeps throwing this error up. I've got an EE booster connected to a network switch upstairs, when I work upstairs I don't notice the error, it only happens when I'm working downstairs where I'm connected to the router via WiFi. When the error comes up, my phone seems to drop off the WiFi then reconnect.

I spoke to technical support a few weeks ago and they've never come across this before, so were unable to help really.

Any assistance would be appreciated.

[Lesley_W]

Hi @jaylaa16 

Welcome to our community.

I'm sorry our technical team couldn't help with this, it does seem to be specific to ESET and not something our teams will have come across. Have you been able to check with ESET to see if they can shed any light on this error?

Lesley

[jaylaa16]

Hello,

I've spoken to my IT Team, they've basically advised to check with EE, as something is causing this locally. It's coming from the router (192.168.1.254) by the looks of it. As mentioned, this never happened when I was on BT directly, only since going to EE. 

[MarkF1812]

I have the same issue - as does one of my colleagues.

Both using EE and ESET, all working without issue until 21/1/25. Error messages now come constantly, but only when connected to EE (other broadband routes do not flag issues).

IT team advise that it is EE as it is coming from the router and confirm that it does not appear to be a ESET issue.

Please advise solution.

[jaylaa16]

Hello Mark,

Thank you for your response - Yeah as mentioned I switched from BT to EE (it never happened when I was with BT) and it started happening the last month or so.

I've spoken to a technical advisor at EE who's never come across this issue and was unable to help but advised me to speak to my internal IT team. Not sure where to go with it, as it could be fine for a couple of hours then next minute my ESET spams "ARP cache poisoning attack". I can only assume it's an EE router issue.

Thanks

[bobpullen]

@jaylaa16 - did you have extenders with BT and were they configured in the same way? I doubt it's anything to be too concerned about and could well be ESET being a little over-zealous. Seems there's a fair few people questioning similar behaviour out there.

If it's that much of a nuisance, perhaps it's worth looking to see if you can add an exception for the alert.

---

@MarkF1812 wrote:

I have the same issue - as does one of my colleagues.

Both using EE and ESET, all working without issue until 21/1/25....

---

This is interesting. Anything happen around that time? Firmware update maybe?

[romchip]

Hi. Just adding that I have this issue appearing in my ESET logs too  - certainly back to 24th Feb.

[PT6670]

Hi everyone. I have just moved to a new property and joined EE. With Virgin at previous property.

My wife's laptop which is running EST is giving the same message regarding ARP Cache Poisoning Attack whereas my work laptop that is protected using Cyber Security package from our IT provider is not picking up any such messages.

I don't have any extenders installed.

My wife is getting annoyed by the message keep popping up... would be great if EE could actually do some digging on behalf of users to try and resolve this as it is not really ideal to be creating exceptions in my opinion...

[JimM11]

@PT6670 Have a look see on the Eset Forum.

Searched for 'ARP poisoning' in All Content