The current setup of IP banning is quite limited. There's no way to add exception sources (e.g. I'd want my secure homenet to have IP banning disabled on it), and with Nabu Casa Cloud integration, it's impossible to tell what kind of login attempt has failed and where from, as it all gets routed through the locally hosted proxy, resulting in a ban on 127.0.0.1.
Because of this, I have no idea if my domain is under attack, or if it's just a local device that had its login permissions revoked, trying to re-authenticate. The logs do mention slightly more details, but it's just the browser ID, and all it tells me is that it's an iOS device:
Login attempt or request with invalid authentication from localhost (127.0.0.1). Requested URL: '/auth/token'. (HomeAssistant-Extensions-PushProvider/2024.12.2 (io.robbie.HomeAssistant.PushProvider; build:2024.1058; iOS 18.3.0) Alamofire/5.8.0)
It would be nice if we gained a level of control over this proxy, and had some of the client details (such as client name) forwarded.