App keeps getting banned by too many login attempts

Mobile Apps Home Assistant Companion for Android
1

Hi guys,

I keep on getting banned by too many login attempts from the companion app. I then have to either disconnect from wifi if the ban happened when I was on wifi or connect to wifi if it was on the mobile network to be able to access ip-bans.yaml and undo the ban. For now I’ve disabled IP banning out of fear that I will be banned on both. However, I want to be able to re-enable it in the future as I think it’s an important security feature.

These are the logs from two different bans:

Screenshot_20240228_134747_Home Assistant
Screenshot_20240228_134747_Home Assistant1080×2241 166 KB

Screenshot_20240223_083106_Home Assistant
Screenshot_20240223_083106_Home Assistant1080×2241 169 KB

Things I’ve tried so far are:

  • Delete Home Assistant companion app and re-install
  • Delete all the access tokens as mentioned in this post
  • Under http: in the config.yaml added:
  use_x_forwarded_for: true
  trusted_proxies:
    - 86.85.94.11

… but sadly all to no avail.

Anyone else had this issue and know of an sollution?

Thanks for any advice!

2

Hi, I have this problem as well, however it’s only on my wife’s phone, she never opens the app but it’s still useful for location automations. On the other hand I often open it an this doesn’t happen to me, I’m thinking it could be some phone settings which mess with the cache app.
This is only recent however, it had started a few months ago, then stopped and now it happens again

3

@wlooij where you able to solve this problem?
I get it to randomly and sometimes the failed login attempts reach the ban limit and HA locks me out.
This happens on different Android app (I don’t know about iPhones) and on different HA instances.