Return to Answer

1. The IP goes to Quantil Networks. Quantil is the datacenter for UCWeb, the maker of UC Browser (the userganet used). This is very useful info.

2. There are ways to use Java to unmask a proxy user, but they are not foolproof. There are many questions here about how to do that.

3. An online useragent parser returns:

   UC Browser 10 on Android (KitKat) Samsung SM-G313HZ

Useragents can easily be changed or spoofed, but this is what this useragent means, real or not. Given where the IP is coming from, it is likely accurate.

None of these things will prevent attacks in the future, but they do help you understand who sent this attack. It looks like a UCBrowser user on a Samsung device using the UCWeb proxy. You could try reporting this abuse behavior to UCWeb and they might be able to look into it further.

1. The IP goes to Quantil Networks. Quantil is the datacenter for UCWeb, the maker of UC Browser (the useragent used). This is very useful info.

2. There are ways to use Java to unmask a proxy user, but they are not foolproof. There are many questions here about how to do that.

3. An online useragent parser returns:

   UC Browser 10 on Android (KitKat) Samsung SM-G313HZ

Useragents can easily be changed or spoofed, but this is what this useragent means, real or not. Given where the IP is coming from, it is likely accurate.

None of these things will prevent attacks in the future, but they do help you understand who sent this attack. It looks like a UCBrowser user on a Samsung device using the UCWeb proxy. You could try reporting this abuse behavior to UCWeb and they might be able to look into it further.

1. The IP goes to Quantil Networks. Quantil is the datacenter for UCWeb, the maker of UC Browser (the userganet used). This is very useful info.

2. There are ways to use Java to unmask a proxy user, but they are not foolproof. There are many questions here about how to do that.

3. An online useragent parser returns:

   UC Browser 10 on Android (KitKat) Samsung SM-G313HZ

Useragents can easily be changed or spoofed, but this is what this useragent means, real or not. Given where the IP is coming from, it is likely accurate.

None of these things will prevent attacks in the future, but they do help you understand who sent this attack.

1. The IP goes to Quantil Networks. Quantil is the datacenter for UCWeb, the maker of UC Browser (the userganet used). This is very useful info.

2. There are ways to use Java to unmask a proxy user, but they are not foolproof. There are many questions here about how to do that.

3. An online useragent parser returns:

   UC Browser 10 on Android (KitKat) Samsung SM-G313HZ

Useragents can easily be changed or spoofed, but this is what this useragent means, real or not. Given where the IP is coming from, it is likely accurate.

None of these things will prevent attacks in the future, but they do help you understand who sent this attack. It looks like a UCBrowser user on a Samsung device using the UCWeb proxy. You could try reporting this abuse behavior to UCWeb and they might be able to look into it further.

1. The IP goes to Quantil Networks. Quantil is the datacenter for UCWeb, the maker of UC Browser (the userganet used). This is very useful info.

2. There are ways to use Java to unmask a proxy user, but they are not foolproof. There are many questions here about how to do that.

3. An online useragent parser returns:

   UC Browser 10 on Android (KitKat) Samsung SM-G313HZ

Useragents can easily be changed or spoofed, but this is what this useragent means, real or not.

None of these things will prevent attacks in the future, but they do help you understand who sent this attack.

1. The IP goes to Quantil Networks. Quantil is the datacenter for UCWeb, the maker of UC Browser (the userganet used). This is very useful info.

2. There are ways to use Java to unmask a proxy user, but they are not foolproof. There are many questions here about how to do that.

3. An online useragent parser returns:

   UC Browser 10 on Android (KitKat) Samsung SM-G313HZ

Useragents can easily be changed or spoofed, but this is what this useragent means, real or not. Given where the IP is coming from, it is likely accurate.

None of these things will prevent attacks in the future, but they do help you understand who sent this attack.