Nokia Deepfield (Cloud Genome) — the verified scanner block and how we proved it via FCrDNS
by shop owners for shop owners.
How the PARC feed for Nokia Deepfield was built: Deepfield publishes no official IP list — we verified the active scanner blocks (Google Cloud + Scaleway) fully bidirectionally via FCrDNS against *.deepfield.net. 280 IPv4 + 31 IPv6, every address individually confirmed.
Deepfield is Nokia's internet-wide measurement and mapping scanner (Cloud Genome). It continuously crawls billions of IPv4 and IPv6 addresses, CDN domains and network systems to build a „service delivery map" of the internet. Not an SEO tool, not a classic content crawler. Nokia publishes no official IP list — so we verified the active scanner blocks fully via bidirectional FCrDNS against *.deepfield.net. Part of our PARC Security feed.
deepfield.json — view feed Nokia — Deepfield Genome →
The blocks
280 IPv4 + 31 IPv6 = 311 addresses, across two infrastructures:
216.180.246.0/24 (Google Cloud) 254 IPs crawler001…crawler251.deepfield.net
51.159.125.x (Scaleway FR) 4 IPs monet-NN.crawler.deepfield.net
62.210.142.x (Scaleway FR) 22 IPs monet-NN.crawler.deepfield.net
2001:bc8:702::… (Scaleway FR) 31 IPv6 monet-NN.crawler.deepfield.net
Each address is listed individually as /32 or /128 — no /24 aggregation, because the Scaleway blocks host other Scaleway customers alongside Deepfield. Only what proves itself via DNS goes in.
No official list, no dedicated ASN
Nokia publishes no Deepfield scanner IP list. The Google Cloud block 216.180.246.0/24 is registered in RDAP as an anonymized „Private Customer"; the Scaleway blocks run via Online SAS / Scaleway (AS12876, RIPE). So there is neither a single scanner ASN nor a published list — verification has to go through DNS.
FCrDNS proof — both directions, every address
Reverse-sweep of the candidate blocks, then forward-confirm each hit against *.deepfield.net. Only bidirectionally confirmed addresses enter the feed:
Reverse:
216.180.246.104 → crawler104.deepfield.net
51.159.125.104 → monet-10.crawler.deepfield.net
62.210.142.166 → monet-09.crawler.deepfield.net
Forward-confirm:
crawler104.deepfield.net → 216.180.246.104
monet-10.crawler.deepfield.net → 51.159.125.104
Note: the Scaleway block 62.210.142.x also contains non-Deepfield hosts with generic *.poneytelecom.eu PTR — these drop out automatically in the FCrDNS test and are not in the feed. Only addresses carrying a *.deepfield.net PTR that forward-resolves back exactly are included.
Hostname patterns
crawler{NNN}.deepfield.net (Google Cloud scanners)
monet-{NN}.crawler.deepfield.net (Scaleway scanners, IPv4 + IPv6)