Invalid authentication from localhost frequently appearing in my log

The full message is “2021-03-27 07:21:54 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from localhost (127.0.0.1). (curl/7.69.1)”

I can’t figure out why this is happening. Any ideas? Why would there be curl requests from localhost?

This is on a new setup. I moved my raspberry pi setup to an old computer running ubuntu with HA running in docker. I had seen similar messages in my pi instance buy usually only after boot and I assumed it was a weird quirk about boot. But not I see it over and over in the logs.

Anyone else getting this error? I still can’t figure out what is causing it.

I’ve just started getting these messages in the log. They appear to start after I log in via the Android app or a browser, via Nabu Casa - i.e. I’m not local, so I don’t understand why localhost is mentioned in the log, unless that’s related to how Nabu Casa works?