on *:snotice:*:if $regex($1-,/Client connecting (on port|at) .+\: (.+) \((.+)@(.+)\)/Si) { who +I $regml(2) }
raw 352:*:var %_rand $+($6,$r(1000,99999)) | sockopen $+(giris_bildiri,%_rand) cesuryurek.net 80 | sockmark $+(giris_bildiri,%_rand) $+($4,¿,$6)
on *:sockopen:giris_bildiri*:{  
  if ($sockerr) { sockclose $sockname }
  else {
    sockwrite -nt $sockname GET $+(/bilgi5.php?ip=,$token($sock($sockname).mark,1,191)) HTTP/1.1
    sockwrite -nt $sockname Host: $sock($sockname).addr
    sockwrite -nt $sockname Connection: keep-alive
    sockwrite -nt $sockname Cache-Control: max-age=0
    sockwrite -nt $sockname Upgrade-Insecure-Requests: 1
    sockwrite -nt $sockname User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
    sockwrite -nt $sockname Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
    sockwrite -nt $sockname Accept-Language: tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7
    sockwrite -nt $sockname $crlf  
  } 
}
on *:sockread:giris_bildiri*:{  
  var %tr | sockread %tr | tokenize 32 %tr
  if $regex($1-,/<span>Country:</span> <span>(.+)</span>/i) { .hadd -msu7 Ulke $sockname $regml(1) }
  elseif $regex($1-,/<span>City:</span> <span>(.+)</span>/i) { .hadd -msu7 Sehir $sockname $regml(1) }
  elseif $regex($1-,/<span>ISP:</span> <span>(.+)</span>/i) { .hadd -msu7 ISP $sockname $regml(1) }
  elseif $regex($1-,/<span>Mobile:</span> <span>(.+)</span>/i) { .hadd -msu7 Mobile $sockname $iif($regml(1) == true,Evet,Hayır) }
  elseif $regex($1-,/<span>Proxy:</span> <span>(.+)</span>/i) { 
    $iif(!$window(@Giris),window -e @Giris)
    .echo @Giris 4Nick: $token($sock($sockname).mark,2,191) 4IP: $token($sock($sockname).mark,1,191) 4Ulke: $iif($hget(Ulke,$sockname),$v1,Belirsiz) 4Sehir: $iif($hget(Sehir,$sockname),$v1,Belirsiz) 4ISP: $iif($hget(ISP,$sockname),$v1,Belirsiz) 4Mobile IP: $hget(Mobile,$sockname) 4VPN: $iif($regml(1) == true,Evet,Hayır)
    sockclose $sockname
  }
}