There is a http header, which you can set as proxy which reveals the ip of the original requester. Maybe that would be a good first step.