#!/bin/bash

for i in `docker logs mail | grep "CONNECT from" | awk -F'[' '{print $3}' | cut -f1 -d']' | sort | uniq -c | sort -n  | awk '{ if ( $1 > 100)  print $2 }'`; do 
    echo docker exec -it mail fail2ban ban $i;
done