Residential proxy activity detected on White House network

Layer3 Intel reports that its monitoring recorded residential proxy exits through six addresses on the White House network from October 5 to November 3, 2026. The activity’s source and the person, if any, behind it are unknown; the company says a device with a proxy SDK could pose a risk if the software permits access to internal systems.

• Layer3 Intel recorded 236 proxy exits through six addresses on the White House network across 26 of 30 days between October 5 and November 3, 2026.· 1 source
• The company said 28 residential proxy services were able to exit through the network, and that other proxy-detection services also identified the addresses as residential proxy exits.· 1 source
• About half of the observed activity occurred between 5 p.m. and midnight Eastern time; Layer3 Intel said the timing may suggest a person using the network, but it could not identify a device or individual.· 1 source
• Layer3 Intel warned that a vulnerable proxy SDK could potentially enable access to internal systems, while noting that its monitoring recorded proxy exits rather than activity inside the network.· 1 source
• The company said the activity was observed incidentally through its monitoring, and that it has saved raw logs and is willing to share them with relevant agencies.· 1 source