diff --git a/config/filter.d/scanlogd.conf b/config/filter.d/scanlogd.conf
index 65ad63f6..15fea329 100644
--- a/config/filter.d/scanlogd.conf
+++ b/config/filter.d/scanlogd.conf
@@ -10,7 +10,7 @@ before = common.conf
 
 _daemon = scanlogd
 
-failregex =  ^%(__prefix_line)s<HOST>\ to\ [\.:0-9a-f]+\ ports\ [\ \.,0-9]+,\ f.......,\ TOS\ [0-9]+,\ TTL\ [0-9]+\ \@[0-9]{1,2}:[0-9]{2}:[0-9]{2}$
+failregex =  ^%(__prefix_line)s<ADDR>(?::<F-PORT/>) to \S+ ports\b
 
 ignoreregex =