Running game mods while online gaming is very risky, whatever the mods, whether they are beneficial or malicious makes no difference, if server admins detect them, they will dish out a ban, nothing surprising there.
The only thing that is a mystery so far is why out of 2 consoles using the same idps & same PSN account, only one manages to connect to PSN. IF the tests were valid, that would imply a third element in the "ban equation" & if so, it would be useful to know which one...
In practice, with the tools available to you, the best way to find out whether some extra file or whatever is accessed during the PSN login phase is to use a debug stage2.bin & follow the broadcasted logs on socat (UDP port 18194). You would need to capture the logs on both consoles & see if anything is different..
The only thing that is a mystery so far is why out of 2 consoles using the same idps & same PSN account, only one manages to connect to PSN. IF the tests were valid, that would imply a third element in the "ban equation" & if so, it would be useful to know which one...
In practice, with the tools available to you, the best way to find out whether some extra file or whatever is accessed during the PSN login phase is to use a debug stage2.bin & follow the broadcasted logs on socat (UDP port 18194). You would need to capture the logs on both consoles & see if anything is different..