Invalid authentication from localhost (127.0.0.1)

hi! for the past several months i have been receiving this error thousands of times a day:

Login attempt or request with invalid authentication from localhost (127.0.0.1). Requested URL: '/auth/token'. (Home Assistant/2026.2.1 (io.robbie.HomeAssistant; build:2026.1766; iOS 26.3.1) Alamofire/5.8.0)

my wife is the only one with an ios device.

externally, we access hass via hass cloud. internally, we have a local caddy reverse proxy to a lan-only https address.

i’ve tried uninstalling/reinstalling the ha app on her iphone, clearing all of her login tokens, etc., but this error keeps coming back.

what i find odd is that this particular error is the only one that seems to mask the ip of the failed login device with 127.0.0.1.

if i manually perform a failed login on her phone, the phone’s ip address will show up in the logs. same for any other device.

is there something at play here with the ha cloud/caddy proxy combination for internal/external urls?