on *:snotice:*client*connection*:{ var %ip. $remove($gettok($10,2,64),$chr(41)) | if $regex(%ip,fff|as|ttt) { .gline $9 Sebep } }