HI Midwestkel,
Going through the tickets and we noticed your ticket, which we hadn’t replied to when we released this functionality, sorry.
The latest version of WP Security Audit Log supports Varnish and any other type of reverse proxy or WAF, which means even if you have such a hop in front of your WordPress the plugin will still report the user’s originating IP address. Here is more information about this:
https://www.wpwhitesecurity.com/wordpress-plugins/wordpress-user-monitoring-plugin/wp-security-audit-log-plugin-retrieves-originating-wordpress-user-ip-address/
Thank you for using our plugin. Should you have any further queries do not hesitate to get in touch.