不一定是真实ip,有的服务器有ip转发或者用户自己使用vpn代理
protected String getIpAddr(HttpServletRequest request) { String ip = request.getHeader("x-forwarded-for"); if (null == ip || 0 == ip.length() || "unknown".equalsIgnoreCase(ip)) { ip = request.getHeader("Proxy-Client-IP"); } if (null == ip || 0 == ip.length() || "unknown".equalsIgnoreCase(ip)) { ip = request.getHeader("WL-Proxy-Client-IP"); } if (null == ip || 0 == ip.length() || "unknown".equalsIgnoreCase(ip)) { ip = request.getHeader("X-Real-IP"); } if (null == ip || 0 == ip.length() || "unknown".equalsIgnoreCase(ip)) { ip = request.getRemoteAddr(); } return ip; }