[03:14:40] https://meta.miraheze.org/wiki/Special:CentralAuth/-rice_ball_the_leafy_fanatic 'i attack xxx' LTA again [03:19:57] So this is another "i attack xxx" LTA? [03:20:08] yes [03:20:25] Had no idea that guy was back again [03:22:19] I was thinking that guy would be another Yummie1207 alt based on the similar edits [03:25:25] some edit patterns are now stopped because of the abuse filters [03:26:02] and they started to make more edits to gain autoconfirmed group now [03:26:16] to edit protected pages [03:27:50] they also edit the same user (talk) and translation NS pages with similar edit patterns [03:28:11] therefore i think they are the same person [03:39:22] [1/2] @CVT I have reason to believe this user might be Elijah Fernandez returning: https://www.avid.wiki/User:Ef2981 [03:39:23] [2/2] The username format of "Ef" and four random numbers has been used before by some of Elijah's other oodles of accounts before, such as this one (https://www.avid.wiki/User:Ef8171). As such I would like for a T&S person to run CU if possible to confirm whether or not it's really him [04:04:57] This is one of those weird LTAs that makes and then repeatedly reverts 1-byte edits [04:05:44] That's real odd. [04:10:34] This account has already been locked for several months [04:10:53] Guessing this is the one you meant? [04:11:06] [Ef29280 ](https://meta.miraheze.org/wiki/Special:CentralAuth?target=Ef29280) [04:15:00] Ah, disregard, I misread the initial report. All locked [12:08:35] [1/2] @CVT Looks like the Soyjak vandals have chosen to target the ``jsalwiki`` from what I can see from [the recent changes page](https://wiki.jsal.org/wiki/Special:RecentChanges?hidebots=1&limit=1000&days=180&enhanced=1&urlversion=2) and [these](https://wiki.jsal.org/wiki/Special:Contributions/2A02:6EA0:CE14:3035:0:0:0:11) [IP editors](https://wiki.jsal.org/wiki/Special:Contribut [12:08:35] [2/2] ions/2A02:6EA0:CE14:3035:0:0:0:12) that are involved.