[DEFAULT] honeypot = fail2ban@localhost [Definition] failregex = to=<honeypot> fromip=<IP> [Init] honeypot = sweet@example.com