Residential Proxies Detected on White House Network

Layer3 Intel Team's new Residential Proxy Observatory detected 236 instances of residential proxy exit activity from the White House network (AS2650) between October 5 and November 3, 2026, originating from six IP addresses across 28 different proxy services. The activity pattern—concentrated in evening hours—suggests a person's infected device rather than automated traffic, raising security concerns since compromised proxy SDKs could potentially allow unauthorized access to internal White House systems. The observatory also documented residential proxy activity in extremely remote locations, including over 32,000 observations from Saint Helena and other isolated territories.