White House network address found rented out through 28 residential proxy services
- Severity
- Medium
- Sources
- 1
What happened
Layer3 Intel's Residential Proxy Observatory logged 236 exits via AS2650 (Executive Office of the President) across 26 of 30 days, from October 5 to November 3, 2026, with 6 addresses in use. Spur and Synthient also list the addresses as proxy exits. Activity peaks between 5 p.m. and midnight Eastern, which suggests a single evening-use device with proxy SDK rather than public Wi-Fi. The article ties this to the Kimwolf botnet, which reached over 2 million mostly Android devices via residential proxy networks. Defenders should check DNS logs for known proxy domains, review apps and browser extensions on work devices, segment TVs and low-cost Android devices, and disable Android debug services where unused.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check DNS logs for known residential proxy domains.
- Review apps and browser add-ons on work devices for proxy code.
- Keep TV boxes and other low-cost Android devices off sensitive networks.
- Turn off Android's debug service where it is not needed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Who and what is in it
Companies