When X-Forwarded-For header contains more than one address in comma-and-space separated list, Neo4j picks the first (leftmost) value, whcih represents the client request.