handling lists of ip address in logs (indicates port forwarding proxies)