See HTTP_X_FORWARDED_FOR first to find client IP