check header "X-Forwarded-For"