CA PIM - Unix: 12.8 SP1 CP2
CA PAMSC - Unix: 14.1 CP2
This is fixed by T5C1173 on 12.8 SP1.
The workaround is to check sessionID for TCP log and find login log with same sessionID and see the source host.
Please be aware that sessionID will be changed after restarting PIM/PAMSC.
Please contact Technical Support to get testfix.