Burst of OfficeHome sign-ins from 3+ residential proxy IPs in short window

Duo Tech@duotech

•updated Aug 10, 2026•4•0•12

Detects a single user account signing into OfficeHome from 3+ distinct proxy/anyIP-flagged IP addresses within a 15-minute window, consistent with AiTM session replay from rotating residential proxy infrastructure.