#2293·sftpgo

Add IP to permanent deny list if connection is made using specific non-existing users (like root etc)

Author: mystiquCreated Sep 15, 2026Updated Sep 16, 2026
Labelssuggestion

Is your feature request related to a problem? Please describe.

Would it be possible to define certain conditions in the defender configuration for a permanent ban (added to IP deny list), or by using the Event Manager? I usually se connection tries for root, ubuntu, admin, guest, superuser etc - and I would like the source IP to get automatically added to the deny list (since it's obviously a malicious attempt).

We're using the Azure Marketplace Ubuntu offering with SFTPGo pre-installed.

Br, Mikael

Describe the solution you'd like

In the event of an SFTP connection is rejected due to the user does not exist, and the user exist in a pre-defined list of not allowed users (e.g. root, guest, superuser etc), I would like to source IP to get added to the IP deny list automatically.

Describe alternatives you've considered

No response

What are you using SFTPGo for?

Medium business

Additional context

No response