JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.87.113.203

139.87.113.203 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	Oracle Public Cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6142
Domain Name	oracleemaildelivery.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 139.87.113.203 is an IP address from within our whitelist belonging to the subnet 139.87.112.0/23, which we identify as: "Qualys Scanner".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 139.87.113.203

Whois 139.87.113.203

IP Abuse Reports for 139.87.113.203:

This IP address has been reported a total of 13 times from 6 distinct sources. 139.87.113.203 was first reported on August 15th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 updown.io	2026-06-23 06:31:41 (1 week ago)	{"level":"info","ts":1782196166.4178677,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1782196166.4178677,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"139.87.113.203","remote_port":"41372","client_ip":"139.87.113.203","proto":"HTTP/1.1","method":"GET","host":"159.89.98.98","uri":"/","headers":{}},"bytes_read":0,"user_id":"","duration":0.000069423,"size":0,"status":308,"resp_headers":{"Location":["https://159.89.98.98/"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}} {"level":"info","ts":1782196166.7076375,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"139.87.113.203","remote_port":"41378","client_ip":"139.87.113.203","proto":"HTTP/1.1","method":"GET","host":"159.89.98.98","uri":"/DeviceInformation","headers":{}},"bytes_read":0,"user_id":"","duration":0.000064062,"size":0,"status":308,"resp_headers":{"Location":["https://159.89.98.98/DeviceInformation"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}} {"level":"info","ts":1782196167.0021808,"logger":"http.l ... show less	DDoS Attack Web App Attack
🇩🇪 updown.io	2026-03-06 14:09:18 (3 months ago)	{"level":"info","ts":1772805765.4582856,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1772805765.4582856,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"139.87.113.203","remote_port":"39424","client_ip":"139.87.113.203","proto":"HTTP/1.1","method":"GET","host":"159.89.98.98","uri":"/","headers":{"Connection":["Keep-Alive"],"User-Agent":["QualysGuard"],"Qualys-Scan":["VM"]}},"bytes_read":0,"user_id":"","duration":0.000049675,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://159.89.98.98/"],"Content-Type":[]}} {"level":"info","ts":1772805889.0302,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"139.87.113.203","remote_port":"37328","client_ip":"139.87.113.203","proto":"HTTP/1.1","method":"GET","host":"159.89.98.98","uri":"/","headers":{}},"bytes_read":0,"user_id":"","duration":0.00006833,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://159.89.98.98/"]}} {"level":"info"," ... show less	DDoS Attack Web App Attack
🇮🇪 AutosOnShow	2025-11-19 23:56:04 (7 months ago)	blocked for webapp attack \| path requested: / \| seen at 2025-11-19 23:55:05.741 \|	Web App Attack
🇮🇪 AutosOnShow	2025-11-19 23:38:04 (7 months ago)	blocked for webapp attack \| path requested: / \| seen at 2025-11-19 23:37:09.615 \|	Web App Attack
Anonymous	2025-06-06 00:30:02 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
🇳🇱 astijf	2025-06-02 06:04:42 (1 year ago)	Port Scan detected from 139.87.113.203 (US/United States/-). 5 hits in the last 245 seconds	Port Scan Brute-Force
🇳🇱 astijf	2024-01-29 04:22:08 (2 years ago)	Port Scan detected from 139.87.113.203 (US/United States/-). 5 hits in the last 1306 seconds	Port Scan Brute-Force
🇬🇧 noise.agency	2023-09-14 15:22:29 (2 years ago)	(mod_security) mod_security triggered on hostname [redacted] 139.87.113.203 (US/United States/-)	SQL Injection
🇬🇧 noise.agency	2023-09-13 14:10:43 (2 years ago)	(mod_security) mod_security triggered on hostname [redacted] 139.87.113.203 (US/United States/-)	SQL Injection
🇬🇧 noise.agency	2023-09-12 14:04:33 (2 years ago)	(sshd) Failed SSH login from 139.87.113.203 (US/United States/-)	Brute-Force SSH
🇬🇧 noise.agency	2023-09-12 13:46:25 (2 years ago)	(mod_security) mod_security triggered on hostname [redacted] 139.87.113.203 (US/United States/-)	SQL Injection
🇬🇧 HACK DENY	2023-08-22 11:34:02 (2 years ago)	SQL injection attempt	Hacking SQL Injection Web App Attack
🇬🇧 noise.agency	2023-08-15 13:46:40 (2 years ago)	Port Scan detected from 139.87.113.203 (US/United States/-).	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.192.21

🇳🇱 160.119.71.92

🇭🇰 152.32.254.89

🇮🇳 128.185.56.205

🇷🇴 92.118.39.49

🇺🇸 64.62.197.44

🇧🇷 45.205.1.241

🇦🇺 14.200.249.128

🇦🇺 13.239.222.79

🇺🇸 13.52.221.114

🇺🇸 216.73.217.33

🇷🇴 188.27.152.222

🇧🇷 186.205.21.97

🇺🇸 172.59.187.160

🇲🇦 81.192.46.32

🇨🇳 45.126.120.53

🇨🇳 27.155.172.155

🇺🇸 13.86.105.235

🇷🇴 2.57.121.112

🇩🇪 213.209.159.241