When using a load balancer, the Audit log shows the userhostaddress as the IP address of the load balancer.
The Realm has not been made aware of the load balancer and needs additional configuration
1. Open the SecureAuth Admin Console
2. Select the realm
3. Click System Info
4. Scroll down to IP Configuration
5. Provide the Public IP address if NAT is used to alter the Idp IP to a public IP address.
6. In the Proxy IP list, add the IP address of your load balancer (If you have multiple, separate them by comma)
7. Save the configuration
See here for more information