If traffic from your users goes through a proxy, then the CardioLog Agent will collect the proxy IP address instead of the users real IP.
By default, CardioLog Agent looks at the "REMOTE_ADDR" HTTP request server variable. When using a proxy, this variable will contain the IP of the proxy server.
Alternatively you can set the CardioLog Agent to look at the "HTTP_X_FORWARDED_FOR" HTTP server variable, which will in most cases contains the end user real IP address behind the proxy.
To do that, change the following key value in the CardioLogAgent\web.config file to 'true':
<add key="UserIpBehindProxy" value="true" />
If the "CardioLog Analytics" SharePoint feature is installed (on your SharePoint on-premise farm), the CardioLogAgent folder is located on all SharePoint WFEs under the SharePoint website "_layouts" folder:
SharePoint 2007 - "C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\TEMPLATE\LAYOUTS\CardioLogAgent\".
SharePoint 2010, 2013 - "C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\TEMPLATE\LAYOUTS\CardioLogAgent\".
Otherwise, the CardioLogAgent folder is located in the CardioLog Installation folder (located by default in C:\Program Files\Intlock\CardioLog\CardioLogAgent).