Mobiledevice banned somewhere - not ipban

was trying to setup ha-auth-header integration but couldn’t get it to work. everytime i logged into ha with username & password I got an error with invalid username/pass.
played around trying to find the cause but wasn’t able to.
so removed the integration completely.
But… no matter what I do I cannot logon with my mobile device. Not the app and not in any of the browsers on my mobile.
invalid username/password.
I see the following error each time in the logs from HA.

Logger: homeassistant.components.http.ban
Source: components/http/ban.py:129
Integration: HTTP (documentation, issues)
First occurred: 07:55:51 (8 occurrences)
Last logged: 09:03:40

Login attempt or request with invalid authentication from 192.168.1.202 (192.168.1.202). Requested URL: '/auth/login_flow/1aca53d44134bafd2341f5b3cba1dc3b973b8'. (Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148

any ideas where my issue might be?
I’ve tested different users.
I tried on several other tablet/mobiles and here things work.
I have not had ip_ban enabled so no ipban file.
I did enable ip_ban and the device was added after 5 tries, so I removed the entry (in the hopes that this would clear the ban/issue) - but no…

So I am a bit stumped as to where I need to look…

Hoping someone can give me a few hints :slight_smile:

Fixed it at the last minute (before restoring an older backup)

Now I cannot say why… but…
I’ve used the same password from the beginning…

DinoBlaster52$#"!
above is an example…

it’s always worked… and works in browser on laptop…
but… i have the ssh addon and here I could not use the same password because there was a " in the password.
so changed my password to DinoBlaster52$#!
so no "
and then I was able to login from mobile device… both app and browsers on mobile.