diff --git a/docs/faq.rst b/docs/faq.rst
index d7b5b5f4..b28d5615 100644
--- a/docs/faq.rst
+++ b/docs/faq.rst
@@ -566,7 +566,7 @@ follow these steps:
 
   # Fail2Ban configuration file
   [Definition]
-  failregex = ^\[info\] \d+#\d+: \*\d+ client login failed: "AUTH not supported" while in http auth state, client: <HOST>, server:
+  failregex = ^.*?\[info\] \d+#\d+: \*\d+ client login failed: "AUTH not supported" while in http auth state, client: <HOST>, server:
   ignoreregex =
   journalmatch = CONTAINER_TAG=mailu-front