One of those odd things you see in proxy logs.. in this case, a load of outbound access attempts from guest machine like this: http://69.60.122.18269.60.122.182/ http://85.25.130.1285.25.130.12/ http://89.207.129.789.207.129.7/ http://91.230.147.23191.230.147.231/ http://174.37.202.166174.37.202.166/ http://184.22.165.50184.22.165.50/ http://204.45.70.162204.45.70.162/ http://207.244.209.239207.244.209.239/ http://209.85.148.101209.85.148.101/ Obviously, these URLs are malformed because the IP address is listed twice. But one of these stands out: http://91.230.147.23191.230.147.231/ is clearly “91.230.147.231” […]