diff --git a/filters/ssh.preg b/filters/ssh.preg
index 388a9a8..f0ae9cb 100644
--- a/filters/ssh.preg
+++ b/filters/ssh.preg
@@ -16,3 +16,4 @@ refused connect from [[:print:]]+ \(<HOST>\)
 Did not receive identification string from <HOST>
 Connection closed by <HOST>( port [0-9]+)? \[preauth\]
 Connection closed by authenticating user [[:print:]]+ <HOST> port [0-9]+ \[preauth\]
+banner exchange: Connection from <HOST> port [0-9]+: invalid format