VENDOR APPEAL GUIDE
CrowdSec false positive?
Here’s where to start.
Find CrowdSec false-positive contact details and a practical checklist for requesting a review of a VirusTotal detection.
Appeal contacts
Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.
CrowdSec CTI false-positive review[email protected] · Website / URL↗
Source: Vendor / project documentation · Guidance checked
How to request a review
These are general preparation steps. The listed contact’s own instructions take priority.
- Prepare a technical explanation for why the IP or range is misclassified.
- Publish the relevant IP addresses, ranges or reverse DNS as a machine-readable list available over HTTPS.
- Email [email protected] with that list URL, your justification and the VirusTotal report link.
Scope & contact notes
- Listed in VirusTotal search-prefix documentation but absent from the contributor roster snapshot; this is not proof the engine is currently active.
- This process concerns IP threat-intelligence classification; it is not a general domain allowlisting form.
- This name appears in a VirusTotal engine-prefix list or contact table but is not matched to a current contributor entry. Current engine activity is unconfirmed.
Names you may see in a report
CrowdSeccrowdsec
Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.
Sources for this entry
“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.