Check X-Real-IP header (set by nginx)