First, I suggest you log an idea on the Ideas site to include Client IP or X-Forwarded-For IP within the queryable columns:
That way, you can determine who is making requests to your Server via supported means.
The only other approach is to use Wireshark or configure access logs within Server's tomcat, which is unsupported.