diff --git a/config/filter.d/sshd.conf b/config/filter.d/sshd.conf
index 8e9c22e2..fa1d88ad 100644
--- a/config/filter.d/sshd.conf
+++ b/config/filter.d/sshd.conf
@@ -15,7 +15,7 @@
 # Values:  TEXT
 #
 failregex = Authentication failure for .* from <HOST>
-            Failed [-/\w+]+ for .* from <HOST>
+            Failed [-/\w]+ for .* from <HOST>
             ROOT LOGIN REFUSED .* FROM <HOST>
             [iI](?:llegal|nvalid) user .* from <HOST>