diff --git a/litellm/proxy/auth/network.py b/litellm/proxy/auth/network.py
index 32ad18d4deb..28466156100 100644
--- a/litellm/proxy/auth/network.py
+++ b/litellm/proxy/auth/network.py
@@ -49,11 +49,17 @@ def parse_trusted_proxy_ranges(
     return networks
 
 
+def _unmapped(addr: ipaddress.IPv4Address | ipaddress.IPv6Address) -> ipaddress.IPv4Address | ipaddress.IPv6Address:
+    if isinstance(addr, ipaddress.IPv6Address) and addr.ipv4_mapped is not None:
+        return addr.ipv4_mapped
+    return addr
+
+
 def ip_in_networks(client_ip: str | None, networks: list[TrustedProxyNetwork]) -> bool:
     if not client_ip or not networks:
         return False
     try:
-        addr: Final = ipaddress.ip_address(client_ip.strip())
+        addr: Final = _unmapped(ipaddress.ip_address(client_ip.strip()))
     except ValueError:
         return False
     return any(addr in network for network in networks)
diff --git a/tests/test_litellm/proxy/auth/test_network.py b/tests/test_litellm/proxy/auth/test_network.py
index b67723305e4..83233dc370d 100644
--- a/tests/test_litellm/proxy/auth/test_network.py
+++ b/tests/test_litellm/proxy/auth/test_network.py
@@ -57,6 +57,13 @@ def test_xff_honored_from_trusted_peer():
     assert via_proxy is True
 
 
+def test_ipv4_mapped_peer_and_hop_match_ipv4_trusted_ranges():
+    request = make_request(headers={"x-forwarded-for": "203.0.113.9, ::ffff:10.0.0.5"}, client=("::ffff:10.0.0.1", 1))
+    ip, via_proxy = resolve_client_ip(request, TRUSTED)
+    assert ip == "203.0.113.9"
+    assert via_proxy is True
+
+
 def test_spoofed_xff_from_untrusted_peer_is_ignored():
     request = make_request(
         headers={"x-forwarded-for": "203.0.113.9"}, client=("8.8.8.8", 1)