Thanks for the trick. So the files are part of the official Fail2ban Debian package. But is it normal to have them report by chkrootkit every day?...
Separate names with a comma.