They are built from upstream cloud images, ns8 integration is done and then converted to qemu qcow2, and from there to vmdk.
Team effort, I think… (@Amygos , @davidep , @giacomo , @stephdl ).
But before pointing the finger to someone (joking a bit , j’accuse - 1919), consider if the IP could have come from a migration, hypervisor, etc…