Researchers Find Proxy Traffic Exiting White House Network

Researchers at Layer3 Intel said residential-proxy traffic exited the Executive Office of the President’s network 236 times during a 30-day period, raising questions about whether a device connected to the White House network was enrolled in a commercial proxy service. The findings do not identify the device or its user, and do not establish that anyone accessed or breached internal government systems. Layer3 Intel said it observed the activity on network AS2650, registered to the Executive Office of the President, from October 5 through November 3, 2026. The exits involved six IP addresses and appeared on 26 of the 30 days examined. The researchers also found that 28 residential-proxy services could route traffic through the network. Residential proxy services let paying customers send internet requests through devices connected to other networks, making the traffic appear to come from those devices’ internet addresses. Such services have legitimate uses, but researchers say they can also be used to obscure the origin of online activity. About half of the observed exits occurred between 5 p.m. and midnight Eastern time, Layer3 Intel said. The firm said the pattern could...