The real user's IP address has to be properly extracted from a request if your Wallarm node sits behind a load balancer or a CDN. For the Wallarm NGINX module to process the origin IP correctly, you have to add the
real_ip_header NGINX directives in your NGINX configuration file. This will ensure the connecting IP is being properly derived from an
set_real_ip_from 126.96.36.199/8; set_real_ip_from 188.8.131.52/16; real_ip_header X-Forwarded-For;
More info: ngx_http_realip_module.