2026.9 Remote access - IP Banning changes

Configuration
1

I’ve recently updated a remote instance of HA to 2026.9 and have been some authentication issues with this instance. Some users were locked out for hours while others remained authenticated. A host reboot seems to have resolved it at least for now but I was wondering if anyone else had encountered the same. We’re using Nabu Casa and the issue appeared to be affecting external access only. The issue manifested itself with a login screen but upon entering correct credentials we would immediately seeing connection lost screen. I was suspecting a physical network issue as a ping sensor on google was occasionally (every few hours for a few seconds), dropping but delving deeper into the logs I can see lots of http bans for external URLs and some SSL errors. Coincidence that 2026.9 has introduced some big changes in this area?

In the logs I see a few of these repeatedly, but no actual reason why it was banned?

WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from xx.xx.xx.xx-external url redacted). Requested URL: '/auth/token'. (Home Assistant/2026.9.0 (io.robbie.HomeAssistant; build:2026.2874; iOS 26.6.1) Alamofire/5.12.0)

Further down the line when things got worse I start to see some of these errors with SSL:

ERROR (MainThread) [homeassistant] Error doing job: Exception in callback SSLProtocol.connection_lost() (task: None)
Traceback (most recent call last):
  File "/usr/local/lib/python3.14/asyncio/events.py", line 94, in _run
    self._context.run(self._callback, *self._args)
    ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.14/asyncio/sslproto.py", line 415, in connection_lost
    self._loop.call_soon(self._app_protocol.connection_lost, exc)
                         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
AttributeError: 'NoneType' object has no attribute 'connection_lost'
2026-09-11 13:24:41.779 ERROR (MainThread) [homeassistant] Error doing job: Exception in callback SSLProtocol.connection_lost() (task: None)
Traceback (most recent call last):
  File "/usr/local/lib/python3.14/asyncio/events.py", line 94, in _run
    self._context.run(self._callback, *self._args)
    ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.14/asyncio/sslproto.py", line 415, in connection_lost
    self._loop.call_soon(self._app_protocol.connection_lost, exc)
                         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
AttributeError: 'NoneType' object has no attribute 'connection_lost'
2

Those errors are usually caused by having an old client still open. The clients really need to be reloaded after updating a version.

3

I have also these errors, mainly with HA compagnon for MacOS 2026.9.0, the last one.
I tried to delete the server in the app, restart the app, re-add the server, but still the error.

4

What do you mean by reloaded? Refresh the page or close the companion app? That was done.

5

Restart the the devices should do it.
giphy