$ sudo vi /etc/fail2ban/filter.d/sshd.local
[Definition]
# WARNING Unable to find a corresponding IP address for connection: [Errno -3] Temporary failure in name resolution
# 認証前のタイムアウトログを、名前解決エラーを起こす前に完全に無視する
ignoreregex = ^%(__prefix_line)sTimeout before authentication for connection from <ADDR> to \S+.*$


$ sudo vi /etc/fail2ban/filter.d/apache-overflows.local
[Definition]
# AH10244: invalid URI path
# 既存の正規表現を維持しつつ、AH10244用のパターンを先頭に追加
failregex = ^%(_apache_error_client)s (?:AH10244: invalid URI path|(?:AH001[23][456]: )?Invalid (method|URI) in request\b|(?:AH00565: )?request failed: URI too long \(longer than \d+\)|request failed: erroneous characters after protocol string:|(?:AH00566: )?request failed: invalid characters in URI\b)


$ sudo vi /etc/fail2ban/filter.d/php-url-fopen.local
[Definition]
# WARNING [php-url-fopen] Detected a log entry *m *s before the current time in operation mode.
# This looks like a latency problem. Treating such entries as if they just happened.
# WARNING [php-url-fopen] Please check a jail for a timing issue. 
# 大きいファイルのダウンロードによる遅延警告を回避
# URLに「.php」が含まれる、または「/?」や「/」の直後にクエリパラメータが続く行をすべて抽出する
prefregex = ^<HOST> -.*"(GET|POST) .*(?:\.php|\/\??)[^\s]* HTTP\/.*$