ClamAV Application

The following page provides details on domains, networks, IPs, hosting services, and content delivery networks used by ClamAV.

Description

ClamAV is an open source antivirus engine for detecting trojans, viruses, malware and other malicious threats.

Category	Cybersecurity
Web Link	ClamAV - Home Page

Application Domains

The application domains data shown here is available in our Netify Data Feeds solution. The data is accessible via our IP API as well as downloadable datasets.

Learn More »

Domains

Primary Domains

clamav.net

Primary Domains are owned and managed by the application vendor.

Platform Domains are often provided by hosting providers, content delivery networks, SaaS platforms and other third parties. It is important to identify these domains for DNS filters and hostname blocklists.

Platform Domains

Cloudflare

{hidden}.cloudflare.net

Core Networks

Applications are sometimes deployed on partner networks, parent company networks, or regional hosting providers. The following is a sample of ClamAV IP addresses deployed on this type of network.

Network	PoP	Category	Location	IP
Cisco	Core Network	Business	United States	2620:28:c000:0:aba:ca:daba:54
Cisco	Core Network	Business	United States	172.110.204.38
Cisco	Core Network	Business	United States	172.110.204.39
Cisco	Core Network	Business	United States	198.148.79.38
Cisco	Core Network	Business	United States	198.148.79.54
and 3 more

Other Networks

There are tens of thousands of Internet network providers and we make an effort to track as many as we can, but we have less coverage for niche and local providers. The following is a sample of ClamAV IP addresses on this type of network.

ASN Description	ASN	Route	Location	IP	Shared
Sonic Telecom	AS46375	2001:5a8:600::/39	United States	2001:5a8:601:2::39
Sonic.net	AS7065	157.131.0.0/20	United States	157.131.0.39

Hosting

Cloud hosting vendors like AWS and Microsoft Azure provide cloud-based computing and network resources to deliver applications. The hosting platforms used by ClamAV are summarized below by geographical points-of-presence (PoP). Each PoP can host many IPs to deliver an application.

Cloud Hosts	# of IPs
Equinix	2
IBM Cloud	2

Host	PoP	Location	IPs
Equinix	Secaucus	United States	2 IPs
IBM Cloud	Core	United States	1 IP
IBM Cloud	Anycast	Global	1 IP

Content Delivery Networks - CDNs

In order to get information to end users more quickly, many applications are distributed from multiple geographical points-of-presence (PoPs) using Content Delivery Networks (CDNs). Each PoP can host many IPs to deliver an application. A sample IP is provided.

Take special note of CDNs that use Anycast technology. Anycast makes it possible to route a single IP address to a variety of different geographic locations. In other words, one global Anycast IP is hosted in multiple geographic locations.