diff --git a/config/filter.d/gitea-auth.conf b/config/filter.d/gitea-auth.conf
index f7a048ca..7860062b 100644
--- a/config/filter.d/gitea-auth.conf
+++ b/config/filter.d/gitea-auth.conf
@@ -1,3 +1,3 @@
 [Definition]
-failregex = .*Failed authentication attempt.*remote_addr=.*$
+failregex = ^.*Failed authentication attempt.*from <HOST>[:0-9]*:.*$
 ignoreregex =