Unmasking the Proxy: Silent Push “Traffic Origin” Exposes True Actor Locations

Silent Push details its Traffic Origin capability, which analyzes network signals to reveal the true source of connections that appear to originate from proxies or VPNs, aiding detection of insider threats and state-aligned activity (e.g., North Korean IT workers, Russian-occupied Eastern Ukraine). Using examples such as IPs 205.198.91.136 and 194.147.16.244, the report shows clusters across high-risk regions and explains how combining Traffic Origin with residential proxy data helps distinguish benign residential IP use from criminal infrastructure.