Just another datum to consider - that 154.54.x.x subnet John found belongs to Cogent, Inc., an "Internet vulnerabilities" filter. It's apparently something similar to Cloudflare. Whether this service, probably imposed by the hosting company we're on, is materially impacting performance is something for the experts (not I!) to determine.