AbuseIPDB » 138.94.219.91
138.94.219.91
This IP was reported 5 times. Confidence of
Abuse
is 4% : ?
ISP
Philadelphia PA
Usage Type
Data Center/Web Hosting/Transit
ASN
AS263744
Domain Name
udasha.com
Country
🇺🇸
United States of America
City
New York City, New York
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 138.94.219.91 :
This IP address has been reported a total of
5
times from
2 distinct
sources.
138.94.219.91 was first reported on
July 31st 2025 , and the most recent report was
4 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-10 11:26:50
(4 hours ago)
[Wed Jun 10 18:26:49.986441 2026] [security2:error] [pid 473974:tid 140689890334400] [client 138.94. ...
show more
[Wed Jun 10 18:26:49.986441 2026] [security2:error] [pid 473974:tid 140689890334400] [client 138.94.219.91:10204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-tahunan"] [unique_id "ailJ-Sws4XQ7SK5nWLqbYwAA2AM"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[474000] [z0gFhaQS/wQ] [ailJ-Sws4XQ7SK5nWLqbYwAA2AM] keep_alive=[1] [2026-06-10 18:26:49.986447] [R:ailJ-Sws4XQ7SK5nWLqbYwAA2AM] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac O
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-09 01:32:58
(1 day ago)
[Tue Jun 09 08:32:45.983107 2026] [security2:error] [pid 81977:tid 140246511515328] [client 138.94.2 ...
show more
[Tue Jun 09 08:32:45.983107 2026] [security2:error] [pid 81977:tid 140246511515328] [client 138.94.219.91:51426] ModSecurity: Access denied with code 403 (phase 1). Match of "pm www.office.com powerpoint.officeapps.live.com /offline-service-worker-19-02-2025.js /offline-service-worker-27-01-2024-v5-0-1.js /offline-service-worker-01-08-2023-v4-5-1.js /OneSignalSDKWorker.js /worker-analytic-helper-27-11-2022.js/ /worker-analyti ..." against "REQUEST_HEADERS:Referer" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "580"] [id "440067"] [msg "BAD Referer"] [data "Matched Data: staklim-malang.info found within REQUEST_HEADERS:Referer: https://www.yandex.info/ request_line = GET /images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Distibusi_Curah_Hujan_Bulanan/Analisis_Distibusi_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2026/04_April_2026/Analisis_Bulanan_Distribusi_Curah_Hujan_Bulan_April_Tahun_2026_di_Provinsi_Jawa_Timur.webp HTTP
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-02 00:18:14
(1 week ago)
[Tue Jun 02 07:18:09.574716 2026] [security2:error] [pid 280267:tid 139928234034880] [client 138.94. ...
show more
[Tue Jun 02 07:18:09.574716 2026] [security2:error] [pid 280267:tid 139928234034880] [client 138.94.219.91:27286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /plant-t.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/plant-t.webp"] [unique_id "ah4hQY9t8L72OETi90I8oQABDRA"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[280291] [8KXtPrqNZbI] [ah4hQY9t8L72OETi90I8oQABDRA] keep_alive=[1] [2026-06-02 07:18:09.574722] [R:ah4hQY9t8L72OETi90I8oQABDRA] UA:'Mozilla/5.0 (Linux; Android 13; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bm
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-30 15:16:44
(1 week ago)
[Sat May 30 22:16:43.879535 2026] [authz_core:error] [pid 418225:tid 140573607392960] [client 138.94 ...
show more
[Sat May 30 22:16:43.879535 2026] [authz_core:error] [pid 418225:tid 140573607392960] [client 138.94.219.91:16454] AH01630: client denied by server configuration: /var/www/, referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[418257] [VW7ycspQc/0] [ahr_WydWZJWBEGysPTRclwABQw8] keep_alive=[1] [2026-05-30 22:16:43.879540] [R:ahr_WydWZJWBEGysPTRclwABQw8] UA:'Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.199 Mobile Safari/537.36 (compatible; Google-InspectionTool/1.0)' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'*/*' Referer:'https://staklim-jatim.bmkg.go.id/ Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8
...
show less
Email Spam
Hacking
🇺🇸
etu brutus
2025-07-31 21:30:06
(10 months ago)
138.94.219.91 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: