diff --git a/ban-mail-abusers b/ban-mail-abusers
new file mode 100755
index 0000000..d06deea
--- /dev/null
+++ b/ban-mail-abusers
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+for i in `docker logs mail | grep "CONNECT from" | awk -F'[' '{print $3}' | cut -f1 -d']' | sort | uniq -c | sort -n  | awk '{ if ( $1 > 100)  print $2 }'`; do 
+    echo docker exec -it mail fail2ban ban $i;
+done