on *:snotice:*Client*connecting*: {
who $9
}
raw 352:*: {
  if ($regex($9,/[bcdfghjklmnprstvyz]{3}/i)) { gzline $6 süre sebep }
}