req.ip, but also look at the x-forwarded-for header if you are using a proxy server. This header can have multiple ip's when you have say nginx terminate ssl and use cloudflare.