diff --git a/root/etc/fail2ban/filter.d/sogo.conf b/root/etc/fail2ban/filter.d/sogo.conf
index 730a379..9357fc2 100644
--- a/root/etc/fail2ban/filter.d/sogo.conf
+++ b/root/etc/fail2ban/filter.d/sogo.conf
@@ -5,6 +5,6 @@ before = common.conf
 
 _daemon = sogod
 
-failregex = %(__prefix_line)s\s*SOGoRootPage Login from '<HOST>' for user '.*' might not have worked \-.*
+failregex = ^\s*%(_daemon)s\s*%(__pid_re)s:\s*SOGoRootPage Login from '<HOST>' for user '.*' might not have worked \-.*$
 
 ignoreregex =