None of them is anchored and quite unspecific -- might give a good angle for a DoS attack

provide example log lines, make failregexes more specific to disallow injection