Significant Threat
IP 54.219.29.91 identified as significant threat (8/10) from 19 events.
Multiple malicious indicators detected. Confidence level: 67%.
More threatening than 89% of monitored IPs
IP Address
54.219.29.91
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
United States
Location
Amazon.com, Inc.
ASN 16509
19
Reports
Mixed
Data Source
Threat Categories
WP Version Scanning
17
WP Plugin Scanning
17
WP Config Exposure
17
WP User Enumeration
1
WP Login Brute Force
1
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
19. September 2026
Last Activity
30. September 2026
Recent (7 days)
6 incidents
Cloud Infrastructure
This IP operates from Amazon Web Services (AWS) cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
4/10
Low
Confidence Score
66%
High Confidence
Confidence History
19. Sep 2026 - 30. Sep 2026
67%
Current
Stable
Trend
Security Reports (19)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community x3 | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 54.219.29.91
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
US
- ASN
- AS16509
- ISP
- Amazon.com, Inc.
DNS Information
- Reverse DNS
- ec2-54-219-29-91.us-west-1.compute.amazonaws.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 19
- First Reported
- 19 Sep 2026
- Last Reported
- 30 Sep 2026, 15:46
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS16509
Amazon.com, Inc.
US
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
3,313
Total IPs Monitored
133,751
Total Reports
40.4
Reports per IP
Network Context
This IP address belongs to Amazon.com, Inc. (AS16509), which manages 3,313 IP addresses in our monitoring system. Out of these, 133,751 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 814,896 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
19
avg: 9
++
Network Comparison
Compared against 8,610 IPs in ASN 16509
Threat Level
8/10
network avg: 7.0
+
Total Reports
19
network avg: 18
=
Network Amazon.com, Inc. has overall threat level 4/10
Geographic Comparison
Compared against 144,827 IPs in US
Threat Level
8/10
country avg: 6.8
+
Total Reports
19
country avg: 18
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
23 Sep 2026
5 reports
Daily Average
0.6
reports/day
Most Active
Wednesday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Plugin Scanning
17
WP Version Scanning
17
WP Config Exposure
17
WP Login Brute Force
1
WP User Enumeration
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
740,731 threat incidents tracked globally • Last 24h: 41,022 Logs
FEED
Top Threat Sources
-
01
United States144,806 19.5% -
02
Brazil111,131 15%
-
03
India83,540 11.3%
-
04
China45,237 6.1%
-
05
SC29,243 3.9%
-
06
Germany17,784 2.4%
-
07
Netherlands17,604 2.4%
-
08
Pakistan17,005 2.3%
-
09
Argentina16,216 2.2%
-
10
Colombia15,152 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9/10
Avg Threat
72%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
3.22.187.122
8/10
Confidence
91%
Reports
18
Location
US
US
184.169.158.254
10/10
Confidence
89%
Reports
12
Location
US
US
18.116.101.220
8/10
Confidence
87%
Reports
5,204
Location
US
US
3.129.187.38
8/10
Confidence
84%
Reports
4,460
Location
US
US
3.130.168.2
8/10
Confidence
84%
Reports
3,889
Location
US
US
3.131.220.121
8/10
Confidence
83%
Reports
2,780
Location
US
US
43.199.165.48
10/10
Confidence
82%
Reports
9
Location
HK
HK
18.218.118.203
8/10
Confidence
81%
Reports
4,646
Location
US
US
3.18.221.28
8/10
Confidence
76%
Reports
23
Location
US
US
95.40.160.2
10/10
Confidence
74%
Reports
9
Location
HK
HK
3.151.194.164
7/10
Confidence
68%
Reports
10
Location
US
US
16.176.125.169
10/10
Confidence
68%
Reports
8
Location
AU
AU
3.77.221.157
10/10
Confidence
63%
Reports
7
Location
DE
DE
35.81.39.40
10/10
Confidence
62%
Reports
5
Location
US
US
3.139.242.79
8/10
Confidence
61%
Reports
12
Location
US
US
18.225.7.162
10/10
Confidence
57%
Reports
8
Location
US
US
15.157.122.50
10/10
Confidence
57%
Reports
6
Location
CA
CA
2a05:d01c:136:f600:ac24:7e14:b36e:499c
8/10
Confidence
56%
Reports
6
Location
IE
IE
18.133.199.181
10/10
Confidence
55%
Reports
7
Location
GB
GB
44.244.215.8
10/10
Confidence
55%
Reports
4
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
136.90.54.236
8/10
Confidence
100%
Reports
216
ISP
Google LLC
136.90.53.160
8/10
Confidence
100%
Reports
138
ISP
Google LLC
136.90.48.99
8/10
Confidence
100%
Reports
136
ISP
Google LLC
136.90.54.222
8/10
Confidence
100%
Reports
130
ISP
Google LLC
34.26.152.184
10/10
Confidence
100%
Reports
129
ISP
Google LLC
136.90.15.166
8/10
Confidence
100%
Reports
110
ISP
Google LLC
165.227.15.209
8/10
Confidence
100%
Reports
106
ISP
DigitalOcean, LLC
63.250.36.183
10/10
Confidence
100%
Reports
105
ISP
Namecheap, Inc.
136.90.54.131
8/10
Confidence
100%
Reports
87
ISP
Google LLC
34.138.241.105
10/10
Confidence
100%
Reports
86
ISP
Google LLC
136.90.54.202
8/10
Confidence
100%
Reports
71
ISP
Google LLC
35.253.98.46
10/10
Confidence
100%
Reports
70
ISP
Google LLC
128.14.226.236
10/10
Confidence
100%
Reports
63
ISP
UCLOUD INFORMAT...
52.173.67.116
10/10
Confidence
100%
Reports
60
ISP
Microsoft Corpo...
136.90.30.63
8/10
Confidence
100%
Reports
59
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.4/10
Avg Threat
67%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.65.148.84
10/10
Confidence
67%
Reports
5,669
Location
NL
NL
59.125.55.30
10/10
Confidence
67%
Reports
1,108
Location
TW
TW
172.93.194.34
10/10
Confidence
67%
Reports
895
Location
US
US
85.217.149.12
8/10
Confidence
67%
Reports
679
Location
CA
CA
115.190.188.197
10/10
Confidence
67%
Reports
414
Location
CN
CN
115.56.238.174
10/10
Confidence
67%
Reports
330
Location
CN
CN
162.216.150.214
10/10
Confidence
67%
Reports
288
Location
US
US
152.32.212.149
10/10
Confidence
67%
Reports
207
Location
HK
HK
165.154.164.79
10/10
Confidence
67%
Reports
202
Location
DE
DE
85.217.149.31
10/10
Confidence
67%
Reports
202
Location
CA
CA
85.217.149.62
10/10
Confidence
67%
Reports
182
Location
CA
CA
152.32.128.169
8/10
Confidence
67%
Reports
165
Location
HK
HK
85.217.149.74
10/10
Confidence
67%
Reports
158
Location
CA
CA
91.92.240.229
7/10
Confidence
67%
Reports
155
Location
DE
DE
85.217.149.39
8/10
Confidence
67%
Reports
153
Location
CA
CA