The real user's IP address has to be properly extracted from a request if your Wallarm node sits behind a load balancer or a CDN. For the Wallarm NGINX module to process the origin IP correctly, you have to add the
real_ip_header NGINX directives in your NGINX configuration file. This will ensure the connecting IP is being properly derived from an
set_real_ip_from 220.127.116.11/8; set_real_ip_from 18.104.22.168/16; real_ip_header X-Forwarded-For;
More info: ngx_http_realip_module.