VENDOR APPEAL GUIDE
Snort IP Sample List false positive?
Here’s where to start.
Find Snort IP Sample List false-positive contact details and a practical checklist for requesting a review of a VirusTotal detection.
Appeal contacts
Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.
VirusTotal-listed contactOpen support / project page · Website / URL↗
Source: VirusTotal contact listing · Listed route; submission not tested
How to request a review
These are general preparation steps. The listed contact’s own instructions take priority.
- Confirm that the detection label is Snort IP sample list rather than a separate Snort rule match.
- Open the VirusTotal-listed PhishTank contact instructions and ask which route handles the exact indicator.
- Provide the VirusTotal report and avoid sending file-rule disputes to a phishing URL workflow.
Scope & contact notes
- Listed in VirusTotal search-prefix documentation but absent from the contributor roster snapshot; this is not proof the engine is currently active.
- VirusTotal labels this shared contact row “PhishTank / Snort IP”. The published link is a PhishTank contact page; confirm that it applies to your exact Snort IP result before submitting.
- This name appears in a VirusTotal engine-prefix list or contact table but is not matched to a current contributor entry. Current engine activity is unconfirmed.
Names you may see in a report
Snort IP Sample Listsnort_ip_sample_list
Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.
Sources for this entry
“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.