IP address not fetched correctly, the CF one is fetched

Hello, I am behind CF.
Despite I checked “My site is behind a reverse proxy”
I keep on getting activity and dashboard visits coming in with the cloudflare IP. Which is something that isn’t possible of course.
Is this a normal thing?
How can I prevent this and see the real IP of my visitors?

I read that you advice people to install this plugin “Cloudflare add-on for WP Cerber” but that is more for blacklist and access list if I understood correct.

Thanks a lot