visitor ip addresses not correct

Hi – my wp site is hosted on elementor.com and is under attack w/ over 18,000 brute force login attempts over the last 2 months. The problem I see is that the Cerber dashboard recorded IP addresses are all in a certain range and not the same as the ip addresses showing in the wp activity log. Even my own ip address (as admin) is showing as logging in from one of these “ranged” ip addresses when looking at Cerber log, so it’s getting the wrong ip somehow and this is messing up our lockout rules.

How to get Cerber to actually get the real visitor ip address?