197.218.117.131📋 Copy

# IP Intelligence Briefing: 197.218.117.131

Classification: Low Risk / Residential ISP

Date: Current Intelligence Cycle

---

## Executive Summary

IP address 197.218.117.131 is a residential/business ISP endpoint located in Maputo, Mozambique. The address demonstrates no malicious indicators, no blacklist associations, and a clean security posture. Recommended action: Allow traffic with standard network monitoring.

---

## Network Ownership & Registration

The IP resides within a /18 block allocated to an organization registered with Afrinic. The /24 subnet (197.218.117.0/24) shows zero abuse density and contains no adjacent threat siblings.

---

## Geolocation

---

## Threat Assessment

Threat Indicators: None detected across all monitored threat feeds.

---

## Network Services & DNS

The reverse DNS resolves to a Movitel domain (movitel.co.mz), indicating this is a residential or small business broadband endpoint from a Mozambican telecommunications provider.

---

## Historical Observations

Total Observations: 14

Key Historical Signals:

• Subnet Classification: Consistently clean across all observations
• Abuse Density: 0 (no neighborhood threats)
• Ownership Changes: 0 (stable allocation)
• Threat Persistence: 0 days (no persistent malicious activity)
• Observation Period: Recent activity concentrated within 2026-07-30 timeframe

Temporal Analysis: The IP demonstrates no behavioral escalation. Threat persistence metrics indicate no persistent malicious activity over the observation window.

---

## Relationship Graph

Associated Entities:

• Network: 197.218.64.0 - 197.218.127.255 (Same Network)
• Hostnames: dynamic-adsl.movitel.co.mz (DNS Association)

Campaign Correlation: No associated campaigns detected.

---

## Neighborhood Analysis

The immediate /24 neighborhood shows no adjacent malicious IPs, supporting the clean classification of this endpoint.

---

## Control Plane & Routing

---

## Recommended Actions

Security Posture: No immediate action required.

Firewall Rules: Not recommended due to low risk profile.

Monitoring: Standard logging and network monitoring recommended for baseline activity.

Threat Hunting: No priority hunting indicators present.

---

## Intelligence Conclusion

IP 197.218.117.131 is a legitimate residential/business broadband endpoint from Mozambique with no observed malicious activity. The address demonstrates clean network behavior, no blacklist associations, and no threat indicators across all monitored feeds. The DNS association with Movitel (a known Mozambican ISP) further validates the residential classification.

Recommended SOC Action: Monitor with standard procedures. No blocking or alerting required at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.