Cyber ·
White House internet address reportedly rented out through residential proxy services
According to Layer3 Intel and Synthient, outbound traffic from a network reserved for the White House Executive Office reportedly passed through residential proxy services between October 5 and November 3, 2026, as reported by Krebs on Security.
Security reports indicate that devices used by White House staff may have carried residential proxy software, making internet addresses from the network reserved for the Executive Office of the President (AS2650) available for rent by third parties. The firm Layer3 Intel said it detected several residential proxy nodes exiting that network; according to its analysis, they exited 236 times between October 5 and November 3, from six addresses, on 26 of 30 days, with most activity between 5 pm and midnight. Synthient, a proxy-tracking firm, linked part of this activity to Windows 11 installations of a proxy service often bundled with free mobile and desktop apps. One of the services belongs to a Russian company whose founder was previously tied to hosting used in 2016 attacks on election systems. Layer3 Intel said it found 28 distinct residential proxy services able to exit through this network, available by paid subscription for a few dollars. From a website's view, proxied traffic appears to come from the rented address, not from the customer. The White House did not immediately respond to a request for comment. To verify, consult the original Krebs on Security article published November 5, 2026, using the title above, and the materials from the companies it cites.