; --- Settings ---

alias -l bl_file { return D:\blacklist.txt } ; Blacklist file location
alias -l bl_time { return 1d } ; 1d = 1 day, change this to whatever the ban action supports
alias -l bl_action { return GZLINE } ; You can use KILL,GLINE,SHUN,KLINE,ZLINE,GZLINE or what ever you wanna use as ban action, it is better to use GZLINE if you target to ban an IP address.
alias -l bl_reason { return Possible "VPN/TOR/Proxy" has been detected }

; --- Settings ---

ON *:SNOTICE:*Client connecting*: {
  if (!$file($bl_file)) { return }

  var %nick = $gettok($1-,$calc($findtok($1-,$wildtok($1-,*@*,1,32),32) - 1),32)
  var %host = $gettok($remove($wildtok($1-,*@*,1,32),$chr(40),$chr(41)),2,32)

  if (!%nick) && (!%host) { return }

  var %window = $+(@,$ticks,$ctime)

  window -hj10000000000 %window
  loadbuf %window $qt($bl_file)

  var %r = $fline(%window,* $+ %host $+ *,0)

  window -c %window

  if (!%r) { return }

  if ($bl_action == KILL) { $bl_action %nick $bl_reason | return }

  $bl_action *@ $+ %host $bl_time : $+ $bl_reason
}