diff --git a/modules/journalwatch.nix b/modules/journalwatch.nix
index e470e2c..ef58b40 100644
--- a/modules/journalwatch.nix
+++ b/modules/journalwatch.nix
@@ -54,7 +54,7 @@ let
     Disconnected from authenticating user (root|yoda) \S+ port \S+ \[preauth\]
     Received disconnect from \S+ port \S+:11: Client disconnecting normally \[preauth\]
     Received disconnect from \S+ port \S+:11: Bye Bye \[preauth\]
-    Connection reset by invalid user \S+ \S+ port \S+ \[preauth\
+    Connection reset by invalid user \S+ \S+ port \S+ \[preauth\]
     Connection reset by authenticating user (root|yoda) \S+ port \S+ \[preauth\]
     Connection reset by \S+ port \S+ \[preauth\]
     Connection reset by \S+ port \S+