Add IP to permanent deny list if connection is made using specific non-existing users (like root etc)
Author: mystiquCreated Sep 15, 2026Updated Sep 16, 2026
Labelssuggestion
Is your feature request related to a problem? Please describe.
Would it be possible to define certain conditions in the defender configuration for a permanent ban (added to IP deny list), or by using the Event Manager? I usually se connection tries for root, ubuntu, admin, guest, superuser etc - and I would like the source IP to get automatically added to the deny list (since it's obviously a malicious attempt).
We're using the Azure Marketplace Ubuntu offering with SFTPGo pre-installed.
Br, Mikael
Describe the solution you'd like
In the event of an SFTP connection is rejected due to the user does not exist, and the user exist in a pre-defined list of not allowed users (e.g. root, guest, superuser etc), I would like to source IP to get added to the IP deny list automatically.
Describe alternatives you've considered
No response
What are you using SFTPGo for?
Medium business
Additional context
No response
Source: drakkan/sftpgo