diff --git a/config/filter.d/sieve.conf b/config/filter.d/sieve.conf
index 83608fa6..b2af6774 100644
--- a/config/filter.d/sieve.conf
+++ b/config/filter.d/sieve.conf
@@ -21,7 +21,7 @@ _deamon = (?:cyrus/)?(?:tim)?sieved?
 #          be used for standard IP/hostname matching.
 # Values: TEXT
 #
-failregex = ^%(__prefix_line)sbadlogin: \S+ ?\[<HOST>\] (?:LOGIN|PLAIN|OTP|(?:CRAM|DIGEST)-MD5) authentication failure$
+failregex = ^%(__prefix_line)sbadlogin: \S+ ?\[<HOST>\] \S+ authentication failure$
 
 # Option:  ignoreregex
 # Notes.:  regex to ignore. If this regex matches, the line is ignored.