Cautionary Risk
IP 54.158.9.97 rated 6/10 from 26 security events.
Mixed behavior profile detected. Confidence: 73%.
More threatening than 59% of monitored IPs
IP Address
54.158.9.97
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
United States
Location
Amazon.com, Inc.
ASN 14618
26
Reports
Mixed
Data Source
Threat Categories
Bad Web Bot
24
WP Content Scraping
24
WP User Enumeration
2
Technical Details
Bad web bots ignore robots.txt, scrape content aggressively, and may probe for vulnerabilities.
Recommended Mitigations
Implement bot detection, rate limiting, and use services like Cloudflare Bot Management.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
2. September 2026
Last Activity
6. September 2026
Recent (7 days)
0 incidents
Cloud Infrastructure
This IP operates from Amazon Web Services (AWS) cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Apply balanced security measures based on risk tolerance.
Immediate monitoring recommended.
Reputation Summary
Threat Level
6/10
Medium
High
Activity Frequency
1/10
Very Low
Confidence Score
72%
High Confidence
Confidence History
2. Sep 2026 - 6. Sep 2026
73%
Current
Stable
Trend
Security Reports (26)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| WP User Enumeration | Community | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| WP User Enumeration | Community | 75% |
Technical Details
Basic Information
- IP Address
- 54.158.9.97
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
US
- ASN
- AS14618
- ISP
- Amazon.com, Inc.
DNS Information
- Reverse DNS
- ec2-54-158-9-97.compute-1.amazonaws.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 26
- First Reported
- 2 Sep 2026
- Last Reported
- 6 Sep 2026, 11:03
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS14618
Amazon.com, Inc.
US
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
1,810
Total IPs Monitored
7,620
Total Reports
4.2
Reports per IP
Network Context
This IP address belongs to Amazon.com, Inc. (AS14618), which manages 1,810 IP addresses in our monitoring system. Out of these, 7,620 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
59
%
Global Threat Ranking
This IP is more threatening than 59% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 806,271 reported IPs worldwide
Threat Level
6/10
avg: 6.3
=
Total Reports
26
avg: 9
++
Network Comparison
Compared against 3,499 IPs in ASN 14618
Threat Level
6/10
network avg: 7.7
-
Total Reports
26
network avg: 4
++
Network Amazon.com, Inc. has overall threat level 1/10
Geographic Comparison
Compared against 143,209 IPs in US
Threat Level
6/10
country avg: 6.8
=
Total Reports
26
country avg: 18
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
6 Sep 2026
21 reports
Daily Average
0.9
reports/day
Most Active
Sunday
21 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
4/10
Distribution of threat categories reported over time.
Top Threat Categories
Bad Web Bot
24
WP Content Scraping
24
WP User Enumeration
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
733,188 threat incidents tracked globally • Last 24h: 28,825 Logs
FEED
Top Threat Sources
-
01
United States143,190 19.5% -
02
Brazil110,727 15.1%
-
03
India82,109 11.2%
-
04
China44,727 6.1%
-
05
SC29,233 4%
-
06
Germany17,474 2.4%
-
07
Netherlands17,459 2.4%
-
08
Pakistan16,628 2.3%
-
09
Argentina16,188 2.2%
-
10
Colombia15,132 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.9/10
Avg Threat
75%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
54.147.51.34
8/10
Confidence
84%
Reports
15
Location
US
US
3.83.80.160
10/10
Confidence
84%
Reports
12
Location
US
US
54.172.145.72
10/10
Confidence
83%
Reports
13
Location
US
US
34.227.163.200
8/10
Confidence
79%
Reports
10
Location
US
US
34.234.82.70
8/10
Confidence
78%
Reports
11
Location
US
US
3.94.102.45
10/10
Confidence
76%
Reports
12
Location
US
US
54.163.40.36
10/10
Confidence
76%
Reports
11
Location
US
US
18.97.5.62
10/10
Confidence
75%
Reports
13
Location
US
US
184.73.137.109
8/10
Confidence
74%
Reports
15
Location
US
US
3.86.114.186
10/10
Confidence
74%
Reports
12
Location
US
US
13.218.238.60
8/10
Confidence
73%
Reports
10
Location
US
US
18.205.245.90
8/10
Confidence
72%
Reports
12
Location
US
US
100.54.213.131
8/10
Confidence
71%
Reports
11
Location
US
US
50.16.30.200
10/10
Confidence
71%
Reports
10
Location
US
US
3.85.57.190
10/10
Confidence
71%
Reports
10
Location
US
US
18.212.229.32
8/10
Confidence
70%
Reports
12
Location
US
US
100.26.98.21
8/10
Confidence
70%
Reports
11
Location
US
US
13.221.244.98
10/10
Confidence
70%
Reports
10
Location
US
US
98.88.137.2
7/10
Confidence
70%
Reports
8
Location
US
US
34.234.96.245
8/10
Confidence
69%
Reports
11
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
136.90.54.236
8/10
Confidence
100%
Reports
216
ISP
Google LLC
136.90.53.160
8/10
Confidence
100%
Reports
138
ISP
Google LLC
136.90.48.99
8/10
Confidence
100%
Reports
136
ISP
Google LLC
136.90.54.222
8/10
Confidence
100%
Reports
130
ISP
Google LLC
136.90.15.166
8/10
Confidence
100%
Reports
110
ISP
Google LLC
136.90.54.131
8/10
Confidence
100%
Reports
87
ISP
Google LLC
34.138.241.105
10/10
Confidence
100%
Reports
86
ISP
Google LLC
34.26.152.184
10/10
Confidence
100%
Reports
74
ISP
Google LLC
136.90.54.202
8/10
Confidence
100%
Reports
71
ISP
Google LLC
35.253.98.46
10/10
Confidence
100%
Reports
70
ISP
Google LLC
136.90.30.63
8/10
Confidence
100%
Reports
59
ISP
Google LLC
136.67.210.104
10/10
Confidence
100%
Reports
55
ISP
Google LLC
136.90.20.127
10/10
Confidence
100%
Reports
52
ISP
Google LLC
136.67.214.14
10/10
Confidence
100%
Reports
50
ISP
Google LLC
136.90.24.194
8/10
Confidence
100%
Reports
47
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
8.3/10
Avg Threat
73%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
207.90.244.25
8/10
Confidence
73%
Reports
20,358
Location
US
US
207.90.244.21
8/10
Confidence
73%
Reports
18,721
Location
US
US
207.90.244.2
8/10
Confidence
73%
Reports
18,595
Location
US
US
207.90.244.3
8/10
Confidence
73%
Reports
18,470
Location
US
US
207.90.244.22
8/10
Confidence
73%
Reports
18,371
Location
US
US
146.190.149.252
8/10
Confidence
73%
Reports
15,697
Location
US
US
147.182.225.86
8/10
Confidence
73%
Reports
14,151
Location
US
US
147.182.241.81
8/10
Confidence
73%
Reports
12,420
Location
US
US
147.182.202.179
8/10
Confidence
73%
Reports
12,070
Location
US
US
143.198.238.87
8/10
Confidence
73%
Reports
11,612
Location
US
US
143.198.225.197
8/10
Confidence
73%
Reports
10,939
Location
US
US
165.227.172.206
8/10
Confidence
73%
Reports
7,670
Location
DE
DE
176.65.149.27
10/10
Confidence
73%
Reports
6,409
Location
NL
NL
176.65.149.30
10/10
Confidence
73%
Reports
6,273
Location
NL
NL
157.245.222.108
8/10
Confidence
73%
Reports
4,271
Location
US
US