Check HTTP_X_FORWARDED_FOR for user's real ip