USE trwiki_p;

SELECT CONCAT("tr.wikipedia.org/w/index.php?action=edit&undoafter=",

rc.rc_last_oldid,"&undo=",rc.rc_this_oldid,"&curid=",rc.rc_cur_id) as url, rc.rc_namespace, rc.rc_deleted, rc.rc_patrolled,rc.rc_comment

from recentchanges_userindex rc left join recentchanges r2 on r2.rc_last_oldid = rc.rc_this_oldid

where 

(

  rc.rc_user_text RLIKE "85.195.76"   -- (part of) vandal ip or username

  OR rc.rc_user_text RLIKE "37.154."   -- (part of) vandal ip or username

  OR rc.rc_user_text RLIKE "173.255.1"   -- (part of) vandal ip or username

  OR rc.rc_user_text RLIKE "109.236.81.1"   -- (part of) vandal ip or username

  OR rc.rc_user_text RLIKE "184.75.221.2"   -- (part of) vandal ip or username

  OR rc.rc_user_text RLIKE "85.106.1"   -- (part of) vandal ip or username

  OR rc.rc_user_text RLIKE "85.102.1"   -- (part of) vandal ip or username

)

and rc.rc_namespace not in (14)

and rc.rc_this_oldid not in (SELECT r2.rc_last_oldid from recentchanges_userindex r2)

order by rc.rc_patrolled, rc.rc_deleted, rc.rc_namespace desc, rc.rc_this_oldid

-- limit 10

;