Mobile App regularly gets IP banned

Mobile Apps Home Assistant Companion for Android
1

I have recently started getting IP banned on our mobile app and I have no idea why.
This is a recent problem.

Can anyone shed any light on it or suggest a way to troubleshoot??

Mobile App ver. 2023.12.4-full

image

2024-01-16 10:45:36.187 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from homeassistant.localdomain (192.168.1.25). Requested URL: '/api/websocket'. (Home Assistant/2023.12.4-11898 (Android 14; Pixel 7a))
2024-01-16 10:45:36.537 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from homeassistant.localdomain (192.168.1.25). Requested URL: '/api/websocket'. (Home Assistant/2023.12.4-11898 (Android 14; Pixel 7a))
2024-01-16 10:45:36.733 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from homeassistant.localdomain (192.168.1.25). Requested URL: '/api/websocket'. (Home Assistant/2023.12.4-11898 (Android 14; Pixel 7a))
2024-01-16 10:45:37.052 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from homeassistant.localdomain (192.168.1.25). Requested URL: '/api/websocket'. (Home Assistant/2023.12.4-11898 (Android 14; Pixel 7a))
2024-01-16 10:45:37.253 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from homeassistant.localdomain (192.168.1.25). Requested URL: '/api/websocket'. (Home Assistant/2023.12.4-11898 (Android 14; Pixel 7a))
2024-01-16 10:45:37.701 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from homeassistant.localdomain (192.168.1.25). Requested URL: '/api/websocket'. (Home Assistant/2023.12.4-11898 (Android 14; Pixel 7a))
2024-01-16 10:45:37.926 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from homeassistant.localdomain (192.168.1.25). Requested URL: '/api/websocket'. (Home Assistant/2023.12.4-11898 (Android 14; Pixel 7a))
2024-01-16 10:45:37.930 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from homeassistant.localdomain (192.168.1.25). Requested URL: '/api/websocket'. (Home Assistant/2023.12.4-11898 (Android 14; Pixel 7a))
2024-01-16 10:45:38.500 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from homeassistant.localdomain (192.168.1.25). Requested URL: '/api/websocket'. (Home Assistant/2023.12.4-11898 (Android 14; Pixel 7a))
2024-01-16 10:45:38.500 WARNING (MainThread) [homeassistant.components.http.ban] Login attempt or request with invalid authentication from homeassistant.localdomain (192.168.1.25). Requested URL: '/api/websocket'. (Home Assistant/2023.12.4-11898 (Android 14; Pixel 7a))
2024-01-16 10:45:38.501 WARNING (MainThread) [homeassistant.components.http.ban] Banned IP 192.168.1.25 for too many login attempts
2

(I’m replying to myself here because I was surprised not to have had any replies given how responsive the mobile devs usually are.)

Maybe it is because I forgot to mention that the IP being banned is my HA server.

How can my server ban itself from logging on? :person_shrugging:

3

Try deleting all the Refresh Tokens (not the Long-Lived Access Tokens) in your profile. Then open the app and re-enter your log on credentials to create a new token (you will have to re-authenticate all your other browsers too).

1 Like
4

Thanks, I’ll try that.