So. I looked through the thread and even went back some more.
These two
>>949154 >>949160 were a mistake, they have well developed "post history", second is clearly a VPN, has many posts on several IPs on the same narrow range.
These are whatever
>>949167 >>949168 >>949169 >>949174 >>949183 >>949188 >>949188 >>949269 some most likely is the spammer.
However these:
>>949184 >>949192 >>949194 >>949196 >>949201 >>949204 >>949209 >>949212 >>949214 >>949219 >>949226 >>949228 >>949232 >>949236 >>949242 >>949246 >>949248 >>949250 >>949252 >>949254 >>949255 >>949257 >>949258 >>949260 >>949263 >>949264 >>949266 >>949267 >>949270 >>949271 >>949273 are mighty curious.
These are from the same broad range, which features only once in the previous thread. The range was brought in after the 7th ban, and cycled through IPs after each further ban on it. I do think this is an Australian residential dynamic IP, or like a mobile subscription, the IP can be released/renewed easily.
From the taunts and replies (like his last message here
>>949273), and that he moved to spam other boards
he posted Nuro too elsewhere I'm hundred percent sure he is the spammer.
But what I really find interesting is that
1. it was brought in like some kind of lightning rod, the user knew very well, he could cycle through "endless" reserve of IPs.
2. beyond that one post in the previous thread, there is no post history to this range; he could have a different broad range before, but how could he knew it he'll get a "brand new"?
I think normally he uses a VPN, and sometimes open proxies, but he has only a limited amount of that.
It would be nice if there were no custom flags, but maybe captcha for each post. And maybe IDs.