Re: [clamav-users] IP List for Virus Definition Domain

[Arnaud Jacques]

Hello,

Le 15/09/2021 à 19:17, G.W. Haywood via clamav-users a écrit :

Hi there,

On Wed, 15 Sep 2021, James Freeman wrote:

Is there a list of IPs that the ClamAV domain used to download virus 
definition resolves to?


Here's the (very short) list that it resolves to from my location:

$ dig +short database.clamav.net
database.clamav.net.cdn.cloudflare.net.
104.16.218.84
104.16.219.84

It's a content delivery network - do the same query where you are and
you'll probably get different answers.  But you won't get a complete
list unless you qeury from locations all over the planet.


Couldflare public IPs are avalaible :
https://www.cloudflare.com/ips/

--
Cordialement / Best regards,

Arnaud Jacques
Gérant de SecuriteInfo.com

Téléphone : +33-(0)3.60.47.09.81
E-mail : a...@securiteinfo.com
Site web : https://www.securiteinfo.com
Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom
Signatures for ClamAV antivirus : http://ow.ly/LqfdL

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] IP List for Virus Definition Domain

[Paul Kosinski via clamav-users]

When I do a DNS lookup I also get:

  104.16.218.84
  104.16.219.84

This is the same result that I got well over a year ago, when I had to add 
these IP addresses as holes in my firewall so that my normally isolated 
internal server could update its ClamAV instance.

These are Anycast addresses, so the physical servers can move around without 
needing to change IP addresses. (There might even be multi-machine 
load-balancing at a single Cloudflare POP, I suppose.)



On Wed, 15 Sep 2021 18:17:56 +0100 (BST)
"G.W. Haywood via clamav-users"  wrote:

> Hi there,
> 
> On Wed, 15 Sep 2021, James Freeman wrote:
> 
> > Is there a list of IPs that the ClamAV domain used to download virus 
> > definition resolves to?  
> 
> Here's the (very short) list that it resolves to from my location:
> 
> $ dig +short database.clamav.net
> database.clamav.net.cdn.cloudflare.net.
> 104.16.218.84
> 104.16.219.84
> 
> It's a content delivery network - do the same query where you are and
> you'll probably get different answers.  But you won't get a complete
> list unless you qeury from locations all over the planet.
>

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] IP List for Virus Definition Domain

[Lyle Giese via clamav-users]

FYI, I queried from two distinct locations and got the same IP address.  
I then did a traceroute from each of those locations and it took 
different but short routes into CloudFlare's network.  I presume they 
use anycast routing.(and I could be wrong).


Lyle Giese

LCR Computer Services, Inc.

On 9/15/21 12:17 PM, G.W. Haywood via clamav-users wrote:

Hi there,

On Wed, 15 Sep 2021, James Freeman wrote:

Is there a list of IPs that the ClamAV domain used to download virus 
definition resolves to?


Here's the (very short) list that it resolves to from my location:

$ dig +short database.clamav.net
database.clamav.net.cdn.cloudflare.net.
104.16.218.84
104.16.219.84

It's a content delivery network - do the same query where you are and
you'll probably get different answers.  But you won't get a complete
list unless you qeury from locations all over the planet.



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] IP List for Virus Definition Domain

[G.W. Haywood via clamav-users]

Hi there,

On Wed, 15 Sep 2021, James Freeman wrote:


Is there a list of IPs that the ClamAV domain used to download virus definition 
resolves to?


Here's the (very short) list that it resolves to from my location:

$ dig +short database.clamav.net
database.clamav.net.cdn.cloudflare.net.
104.16.218.84
104.16.219.84

It's a content delivery network - do the same query where you are and
you'll probably get different answers.  But you won't get a complete
list unless you qeury from locations all over the planet.

--

73,
Ged.

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] IP List for Virus Definition Domain

[Joel Esler (jesler) via clamav-users]

It’s dynamic baed on your location in the world. Do a dns lookup for 
database.clamav.net  from your location and you 
should get your answer.

> On Sep 15, 2021, at 12:52 PM, James Freeman  wrote:
> 
> ALCON,
>  
> Is there a list of IPs that the ClamAV domain used to download virus 
> definition resolves to? 
>  
> Thanks,
> James
>  
>  
>  
> James Freeman
> Sec+, CASP+,
> AWS SA-A
> Tech Lead- PAI/OSINT
> National Security & Intelligence
> - - - - - - - - - -
> Mobile (253) 273-3747
> Office (703) 270-1194
>  
>  
>  
> 
> ___
> 
> clamav-users mailing list
> clamav-users@lists.clamav.net 
> https://lists.clamav.net/mailman/listinfo/clamav-users 
> 
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq 
> 
> 
> http://www.clamav.net/contact.html#ml 


smime.p7s
Description: S/MIME cryptographic signature

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] IP List for Virus Definition Domain

[James Freeman]

ALCON,

Is there a list of IPs that the ClamAV domain used to download virus definition 
resolves to?

Thanks,
James


[http://www.ecstech.com/wp-content/uploads/2018/02/ECS_Logo_email.png]
James Freeman
Sec+, CASP+,
AWS SA-A
Tech Lead- PAI/OSINT
National Security & Intelligence
- - - - - - - - - -
Mobile (253) 273-3747
Office (703) 270-1194




___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml