On Sep 20, 2021, at 13:08, Paul Kosinski via clamav-users <clamav-users@lists.clamav.net> wrote:

These two IPs are Anycast addresses, and have been unchanged for well over 2 years. (Anycast addresses don't have to change even if the physical servers change, that's their point!) They are:

104.16.218.84
104.16.219.84

That’s what they are for you. Cloudflare routes you to the closest pop to your network. Your mileage may vary

I don't know if they are appropriate for non-freshclam ways of obtaining the updates, e.g., updating a mirror. (And I don't know if they work world-wide.)

FreshClam or cvdupdate. That’s what we recommend, that’s what we enforce. Use one of those two or risk being cut off completely in the future.