diff --git a/src/app/api/auth/route.ts b/src/app/api/auth/route.ts
index a18962c..cd2ddc9 100644
--- a/src/app/api/auth/route.ts
+++ b/src/app/api/auth/route.ts
@@ -24,6 +24,12 @@ export async function GET(req: NextRequest) {
         
         if (!auth)
           return NextResponse.json({ message: "Invalid token" });
+
+        const ip = (req.headers.get("x-real-ip") || req.headers.get("x-forwarded-for")?.split(",")[0] || '127.0.0.1').replace('::1', '127.0.0.1');
+
+        if (auth.server_ip !== ip) {
+          return NextResponse.json({ message: "Invalid address" });
+        }
         
         delete SERVER_AUTH_TOKENS[token];
 
diff --git a/src/test/auth.js b/src/test/auth.js
index d512260..431fb5d 100644
--- a/src/test/auth.js
+++ b/src/test/auth.js
@@ -2,7 +2,7 @@ import axios from "axios";
 
 const res = (await axios.post('http://localhost:3000/api/auth', {
     intents: 'server',
-    server_ip: 'localhost'
+    server_ip: '127.0.0.1'
 })).data;
 
 const token = res.token;