# 31.16.251.140 — IP Intelligence Summary

31.16.251.140 is an IPv4 address operated by VODANET - Vodafone GmbH, DE (AS3209), with approximate network location Nuremberg, Germany. It belongs to a mobile network. As of November 14, 2026, IPDebrief rates it Low Risk (15/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/31.16.251.140
- Last updated: 2026-11-14

## Ownership

- Organization: Kabel Deutschland RIPE
- Network name: KABEL-DEUTSCHLAND-CUSTOMER-SERVICES-24
- Allocated block: 31.16.0.0/15
- ASN: AS3209 (https://ipdebrief.com/asn/3209)
- Regional registry: RIPE
- Registered holder: Kabel Deutschland RIPE
- Routing operator: VODANET - Vodafone GmbH, DE
- Network registration country: DE
- Registrant address country: —

## Location

- City: Nuremberg
- Region: Bavaria
- Country: Germany
- Time zone: Europe/Berlin

Approximate network location; registration and certificate addresses are not server-location evidence.

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: yes
- Anycast: Unverified (not proof of unicast)
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (15/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## DNS posture

Mail authentication and CAA are optional domain policies, not IP-wide requirements.

- caa: Not found at queried name (de)
- spf: Not checked
- dmarc: Not checked
- dnssec: Unknown / lookup inconclusive (140.251.16.31.in-addr.arpa)
- fcrDns: Not checked

## Witness AI - IP Assessment (AI-generated)

AI-generated assessment. Verify critical details independently.

Intellectual property analysis for 31.16.251.140/32 indicates the address is assigned to the Vodafone Germany network (AS3209), specifically within the KABEL-DEUTSCHLAND-CUSTOMER-SERVICES-24 block. Geolocation data places the network in Nuremberg, Bavaria, Germany. The host is classified as a mobile IP address and is currently identified as "Firewalled / No Services," with no TLS probes successfully resolving an endpoint. DNS hygiene checks returned a score of zero because SPF, DMARC, and CAA records were either absent or not checked, while DNSSEC status remains unknown. The asset carries a risk score of 15, reflecting standard baseline monitoring parameters rather than confirmed malicious activity. Due to the lack of active service data and the absence of certificate validations, the IP should continue to be monitored for service initiation or behavioral changes.

## Nearby addresses

- 31.16.251.93 (https://ipdebrief.com/31.16.251.93)
- 31.16.251.150 (https://ipdebrief.com/31.16.251.150)

---

Source: IPDebrief, "31.16.251.140 IP intelligence", https://ipdebrief.com/31.16.251.140, updated 2026-11-14. Assessments are probabilistic.