When I do a DNS lookup I also get: 104.16.218.84 104.16.219.84
This is the same result that I got well over a year ago, when I had to add these IP addresses as holes in my firewall so that my normally isolated internal server could update its ClamAV instance. These are Anycast addresses, so the physical servers can move around without needing to change IP addresses. (There might even be multi-machine load-balancing at a single Cloudflare POP, I suppose.) On Wed, 15 Sep 2021 18:17:56 +0100 (BST) "G.W. Haywood via clamav-users" <clamav-users@lists.clamav.net> wrote: > Hi there, > > On Wed, 15 Sep 2021, James Freeman wrote: > > > Is there a list of IPs that the ClamAV domain used to download virus > > definition resolves to? > > Here's the (very short) list that it resolves to from my location: > > $ dig +short database.clamav.net > database.clamav.net.cdn.cloudflare.net. > 104.16.218.84 > 104.16.219.84 > > It's a content delivery network - do the same query where you are and > you'll probably get different answers. But you won't get a complete > list unless you qeury from locations all over the planet. > _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
