on *:snotice:*Client connecting*: {
  .who +I $9
}

on *:snotice:*Client connecting*:.who +I $token($token($4-,2,58),1,32)

raw 352:*:{
  cheproxy $4
}
on *:snotice:*Client connecting*: {
  .who +I $9
}
alias cheproxy {
  var %r $r(0,99999)
  sockopen $+(cheproxy*,%r) e-sisnet.com 80
  sockmark $+(cheproxy*,%r) $1 
}
on *:sockopen:cheproxy*:{
  var %komut sockwrite -nt $sockname
  %komut GET $+(/?ip=,$token($sock($sockname).mark,1,191))  HTTP/1.1 
  %komut Host: $sock($sockname).addr
  %komut Accept: image/jpeg, application/x-ms-application, image/gif, application/xaml+xml, image/pjpeg, application/x-ms-xbap, */*
  %komut Accept-Language: tr-TR
  %komut User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
  %komut Connection: Keep-Alive
  %komut $crlf
}
on *:sockread:cheproxy*:{
  if ($sockerr) { .sockclose $sockname | return }
  var %:proxy | sockread -f %:proxy | tokenize 32 %:proxy
  if $regex($1-,/numaral[ıiİ] [Iİi]P proxy\'dir/i) {
    gzline $+(*@,$sock($sockname).mark) 1h IP adresinizde PROXY girişi tespit edilmiştir.
    if (!$window(@Proxy)) {
      window -neg1 @Proxy
    }
    echo @Proxy ( $+ $time $+ )  $+ $sock($sockname).mark numarali IP adresi PROXY olarak algilandi ve sunucudan atildi.
    halt
  }
}