Wikipedia:Sockpuppet investigations/Mohammad Zahid Hossain/Archive

Suspected sockpuppets
So this one is a doozy, these are all SPAs primarily editing Draft:Soborno Isaac Bari, Izno blocked a handful but there are dozens of others still unblocked that are clearly the same person based on names. I'm including all socks blocked or otherwise for documentation purposes but also to see if a rangeblock is possible. We're getting new accounts and new ips every 30-40 minutes (until Primefac protected it.) CUPIDICAE💕  18:51, 18 April 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * If you pluck all of the ducks, you can stuff the feathers into a big pillow that you can use either to smother more ducks or to take a nap when you take a break from duck hunting. Robert McClenon (talk) 00:02, 19 April 2022 (UTC)
 * Previously, sockpuppets that were part of Sockpuppet investigations/L2pkpandey were involved with editing articles about this subject. Or could this be two different paid editing rings? Liz Read! Talk! 00:52, 19 April 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - -- RoySmith (talk) 20:17, 18 April 2022 (UTC)
 * I'm working through these in batches, and I'll tag them as I do each batch. I'm assuming if I've got a batch that's confirmed to each other, it's safe to mark them as confirmed to the master, even if I haven't proven that.  Most of the user agents appear to be spoofed, so this is never going to be perfect anyway. -- RoySmith (talk) 20:41, 18 April 2022 (UTC)
 * Yeah, they're sneaky, I also added a new one, there appear to be quite a few sleepers. CUPIDICAE💕  20:41, 18 April 2022 (UTC)


 * I tagged the ones where I could match up IPs and made some notes in CU wiki. As for the rest of them, I don't think there's any value in more CU digging.  There's obviously extensive proxy use and user agent spoofing, so the data's all crap anyway.  My suggestion is to be aggressive about duck blocking and page protection. -- RoySmith (talk) 21:03, 18 April 2022 (UTC)
 * requesting admin action, please indef the rest, they're obviously the same spam farm and at best, the last two are either sleepers or compromised. CUPIDICAE💕  21:11, 18 April 2022 (UTC)
 * For what it's worth, my read of the CU data is brigading rather than proxies + spoofing. Either way, concur with Roy's solution: block ducks, protect pages as needed. GeneralNotability (talk) 22:44, 18 April 2022 (UTC)
 * . Ks0stm  (T•C•G•E) 23:16, 18 April 2022 (UTC)
 * Tagged the remaining accounts as suspected, closing. Thanks, Spicy (talk) 15:09, 21 April 2022 (UTC)