Cannot OPt-Out from Mandiant Attacks

Hello ​@mandiantscam25 - 

Are you referring to the Attack Surface Management scans that are occurring against your environment?  If so, you may want to refer to this page, along with our known list of ASM Scanning ranges. 

https://gtidocs.virustotal.com/docs/asm-opt-out
https://gtidocs.virustotal.com/docs/asm-scan-ranges

If ASM has the setting for “Unattributable IP” turned on, this will not use the scanning ranges.  Ensure this is not turned on for your ASM Collection. 

If this in regards to some other functionality, please let me know so I can provide further clarification and guidance.  

Thanks, 

I am not sure which ‘service’ that Mandiant has that is attacking our netblock. All I know is that these packets are not desired and apparently Mandiant makes it hard to find the opt-out page on their site.

Can you provide me with URL that will allow us to stop receiving attack packets from all Mandiant ‘services’?

Hi ​@mandiantscam25 

If you believe that these scans are coming from the ASM ranges I outlined above, you can contact support for opting out. 

https://gtidocs.virustotal.com/docs/asm-opt-out

I hope this helps solve your issue, have a great day!

At this time, there has been nothing other than an automated response syaing they will “consider” my request. How generous of them!

I will update if I ever get an actual response.  Otherwise assume there is no way to opt-out from these attacks.