network attack detected

[hamza.amir]

07/25/2025 5:14:29 pm

Network attack detected

User: VELOSISRV\9022 (Active user) Component: Network Threat Protection Result description: Blocked Name: Mac Spoofing Attack: unexpected ARP response Object: ARP from an unexpected source Object type: Network packet Object name: ARP from an unexpected source Additional: Suspicious: 7/25/2025 5:14:29 PM: f0-a6-54-7d-2c-55 -> 10.171.102.42 Database release date: 7/25/2025 2:44:00 PM

Kaspersky Endpoint Security for Windows (12.9.0) >>

12.9.0.384

Critical

N

5 minutes ago, hamza.amir said:

07/25/2025 5:14:29 pm

Network attack detected

User: VELOSISRV\9022 (Active user) Component: Network Threat Protection Result description: Blocked Name: Mac Spoofing Attack: unexpected ARP response Object: ARP from an unexpected source Object type: Network packet Object name: ARP from an unexpected source Additional: Suspicious: 7/25/2025 5:14:29 PM: f0-a6-54-7d-2c-55 -> 10.171.102.42 Database release date: 7/25/2025 2:44:00 PM

Kaspersky Endpoint Security for Windows (12.9.0) >>

12.9.0.384

Critical

N

 

i face that issue daily i wanna trace this

 

[Tahmeed702]

4 hours ago, hamza.amir said:

07/25/2025 5:14:29 pm

Network attack detected

User: VELOSISRV\9022 (Active user) Component: Network Threat Protection Result description: Blocked Name: Mac Spoofing Attack: unexpected ARP response Object: ARP from an unexpected source Object type: Network packet Object name: ARP from an unexpected source Additional: Suspicious: 7/25/2025 5:14:29 PM: f0-a6-54-7d-2c-55 -> 10.171.102.42 Database release date: 7/25/2025 2:44:00 PM

Kaspersky Endpoint Security for Windows (12.9.0) >>

12.9.0.384

Critical

N

 

i face that issue daily i wanna trace this

 

Take GsiLogs https://media.kaspersky.com/utilities/CorporateUtilities/GSIB-6.2.2.82.exe from that workstation where attack is detected and raise a ticket on https://companyaccount.kaspersky.com/ share the logs in the ticket 

[Renan Corassa]

The MAC address f0-a6-54-7d-2c-55 belongs to an Apple device.

Check your network for the MAC address in the ARP table.

Apple TV? iPhone? Whatever.