Residential proxy exits detected on White House network: 236 exits via 28 services
matthew_d_green · x · 2026-11-05
Security team Layer3 observed residential proxy exit activity on AS2650, the network registered to the Executive Office of the President. From Oct 5 to Nov 3, their enumeration pipeline exited through it 236 times from 6 addresses on 26 of 30 days, across 28 separate residential proxy services. Third-party services like Spur and Synthient independently flag these IPs. Activity clusters between 5pm and midnight ET, suggesting an infected device of someone regularly on the network late at night rather than guest Wi-Fi. The team stresses the access is publicly obtainable — anyone paying a few dollars for rotating proxy access could hit it. Commenters conclude someone's device inside the White House is compromised or acting as a proxy exit for botnets.
More from Safety
- VeriSpoof: one audio LLM unifies deepfake detection, attribution and source verification — unimelb-hf · 2026-11-05
- Debate: did a $4B California ballot push for a single AI lab mislead the public? — NathanpmYoung · 2026-11-05
- Orinyx: an open-source MCP for independently verifying AI agent outputs against evidence — Practical_Green5775 · 2026-11-05
- Alignment lacks an engineering science: behavioral training leaves red-teaming tasks wrongly blocked — JacquesThibs · 2026-11-05
- Researchers Undo SFT Behavior by Subtracting Weight Updates from Final Checkpoints — burny_tech · 2026-11-05
- Op-ed: up to 30% of STEM PhD abstracts show AI use, and AI detectors are rarely wrong — Afinetheorem · 2026-11-05