diff --git a/modules/journalwatch.nix b/modules/journalwatch.nix
index db3914b..630ed90 100644
--- a/modules/journalwatch.nix
+++ b/modules/journalwatch.nix
@@ -381,6 +381,7 @@
           error: kex_exchange_identification: client sent invalid protocol identifier "[^"]*"
           error: kex_exchange_identification: Connection closed by remote host
           error: kex_exchange_identification: read: Connection reset by peer
+          error: kex_protocol_error: type [0-9]+ seq [0-9]+ \[preauth\]
           error: kex protocol error: type [0-9]+ seq [0-9]+ \[preauth\]
           error: PAM: Authentication failure for \S+ from \S+
           error: PAM: Authentication failure for illegal user \S+ from \S+