A fun mnemonic you can use to help remember if the client IP is first or last in the list of X-Forwarded-For logs is:

Are you logging X-Forwarded-For logs when you need them? No, yes, yes, yes, yes