Researchers Find White House IPs Routed Through Residential Proxy Services

Summary

Layer3 Intel found 28 residential proxy services routing traffic through six White House network IPs. Synthient reported Windows 11 machines running the Infatica SDK; researchers warned of possible internal-network exposure, but no such access was confirmed.

Key points

Layer3 Intel said 28 residential proxy services routed researchers’ traffic through six White House network IP addresses hundreds of times between Oct. 5 and Nov. 3.
Synthient observed activity on the same IP addresses and reported that several staffers were running Windows 11 machines with the Infatica proxy SDK.
The White House did not respond to a request for comment.
Layer3 Intel warned that a vulnerable proxy SDK could let proxy customers probe private IP addresses reachable from a device and potentially target other systems; the article does not report confirmed access to White House internal systems.
Layer3 Intel said Spur also confirmed proxy activity and cited Spur research identifying residential proxies in nearly 300 government-owned networks.

Article Details

Event Type: Researchers reported that residential proxy services routed traffic through six White House network IP addresses, with several staff devices reportedly running the Infatica SDK.
Impact: The observed proxy access could let customers route traffic through White House-connected devices. Layer3 Intel warned that insecure proxy SDKs could expose private IP addresses and enable probing or attacks on internal systems, but the article does not report that internal systems were accessed or compromised.