diff --git a/modules/journalwatch.nix b/modules/journalwatch.nix
index 06f3710..1e60758 100644
--- a/modules/journalwatch.nix
+++ b/modules/journalwatch.nix
@@ -101,6 +101,7 @@
           error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
           error: kex_exchange_identification: Connection closed by remote host
           error: PAM: Authentication failure for \S+ from \S+
+          fatal: Timeout before authentication for \S+ port [0-9]+
         '';
         match = "_SYSTEMD_UNIT = sshd.service";
       }