It can be multiple IPs in HTTP headers such as `X-Forwarded-For` but in `REMOTE_ADDR` it's always TCP address and it should be the only one all the time.