Finding the original ip behind ACNS

[exploit_haxor]

Hi All,

           I was looking at some of http logs and found the ACNS is initiating a connect to the internet, but it looks like ACNS acts like a proxy, which means some other host behind this ACNS is intitiating the connection, can somebody help me on how to find the original ip who initiated this connection?

Thanks,

[Atif Awan]

ACNS can be deployed in two modes, proxy and client IP spoofing. In proxy mode the http session has the ACNS IP Address as the source and the only way I know to find out the client IP is to view the logs on ACNS, probably these need to be turned on but you need to check documentation for that as I have not worked on it for quite sometime.

Atif