Skip to content
Residential Proxies Found Routing Traffic Through White House Network

Residential Proxies Found Routing Traffic Through White House Network

First seen 5 Nov 2026, 14:17 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 5, 2026 at 14:17 UTC
  • •Residential proxies were detected routing traffic through the White House network.
  • •The activity involved 28 proxy services and occurred 236 times over 26 days.
  • •Infatica, a proxy service linked to a Russian founder, was a major contributor to this activity.

Between October 5 and November 3, 2026, Layer3 Intel detected residential proxy services routing traffic through the White House network (AS2650). This activity involved 28 different proxy services and occurred 236 times from six IP addresses over 26 of the 30 days. The proxy service Infatica, linked to a Russian founder, was identified as a significant contributor to this traffic. The findings suggest unauthorized bandwidth sharing on a sensitive government network, raising concerns about potential internal network exposure. The proxy activity primarily occurred in the evenings, indicating a user presence during those hours. Layer3 Intel confirmed that access to these proxies is publicly available for a small fee, and the specific addresses involved have not been disclosed due to their sensitivity. The White House has not responded to requests for comment.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 3h ago How this analysis works

Timeline

2026-11-04
Layer3 Intel discloses proxy activity
Layer3 Intel reported residential proxy traffic through the White House network, confirming 236 exits from six IP addresses.
Cyberinsider
2026-11-05
Krebsonsecurity reports on proxy usage
Krebsonsecurity highlighted the use of residential proxies by White House staff, linking it to potential security risks.
Krebsonsecurity

More articles in this cluster (6)

Following this threat?

Track Kimwolf and Executive Office Of The President in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (18)

1 / 3

Common questions

What are residential proxies?
Residential proxies are services that allow users to route internet traffic through other people's devices, masking the original user's IP address.
How can this affect the White House network?
Unauthorized proxy usage can expose sensitive government data and allow malicious actors to route traffic through a trusted government IP.
What should be done to mitigate this risk?
Monitoring and securing the network against unauthorized proxy services is essential to prevent potential data breaches.