diff --git a/IRaCIS.Core.Infra.EFCore/AuthUser/UserInfo.cs b/IRaCIS.Core.Infra.EFCore/AuthUser/UserInfo.cs
index 890033cda..eddead0fd 100644
--- a/IRaCIS.Core.Infra.EFCore/AuthUser/UserInfo.cs
+++ b/IRaCIS.Core.Infra.EFCore/AuthUser/UserInfo.cs
@@ -212,7 +212,7 @@ namespace IRaCIS.Core.Domain.Share
             get
             {
 
-                return _accessor?.HttpContext?.Connection.RemoteIpAddress.ToString();
+                return _accessor?.HttpContext.GetClientIP();
             }
         }
 
@@ -341,4 +341,33 @@ namespace IRaCIS.Core.Domain.Share
 
 
     }
+
+    public static class HttpContextExtension
+    {
+        public static string GetClientIP(this HttpContext context)
+        {
+            var ip = context.Request.Headers["Cdn-Src-Ip"].FirstOrDefault();
+            if (!string.IsNullOrEmpty(ip))
+                return IpReplace(ip);
+
+            ip = context.Request.Headers["X-Forwarded-For"].FirstOrDefault();
+            if (!string.IsNullOrEmpty(ip))
+                return IpReplace(ip);
+
+            ip = context.Connection.RemoteIpAddress.ToString();
+
+            return IpReplace(ip);
+        }
+
+        static string IpReplace(string inip)
+        {
+            //::ffff:
+            //::ffff:192.168.2.131 这种IP处理
+            if (inip.Contains("::ffff:"))
+            {
+                inip = inip.Replace("::ffff:", "");
+            }
+            return inip;
+        }
+    }
 }