This has been resolved in LACNIC, APNIC and AFRINIC by means of a policy proposal that ensures not just the validation but the response (in AFRINIC not yet implemented).
We had a previous attempt to do that in RIPE, but it according to the chairs didn’t reach consensus. https://www.ripe.net/community/policies/proposals/2019-04/ Regards, Jordi @jordipalet > El 25 sept 2026, a las 22:58, Theo Plooij <[email protected]> escribió: > > Hello all, > > I would like to raise a case that shows a gap between abuse-c validation and > abuse handling in practice. > > The assignment 91.92.243.0/24 <http://91.92.243.0/24> (ASSIGNED PA, org > ORG-OL329-RIPE, Omegatech LTD, Seychelles) is maintained by LIR MGN Teknoloji > A.S. (lir-tr-mgn-1-MNT) and announced by AS202412. Since August 2026 it has > hosted an active phishing operation aimed at Dutch consumers on > 91.92.243.136. Spamhaus lists the /22 as SBL686264. > > Timeline: > > 18 August, 22 August, 5 September and 7 September 2026: reports to the abuse > contact [email protected] <mailto:[email protected]>. No reply, no > acknowledgement of receipt. The phishing pages remain online. > 24 September 2026: report to the LIR. The LIR confirmed that it holds the > resource, stated that the /24 is leased via a third-party broker, and > referred me back to [email protected] <mailto:[email protected]>. According > to the LIR, the RIPE NCC confirmed on 17 September 2026 that this address is > valid. > 24 September 2026: report to the RIPE NCC (ticket 1112396). On 25 September > the RIPE NCC replied that its role is limited to ensuring that the abuse > contact is valid, and that handling reports is up to the network operator. > Each party acts within its own mandate, and the result is that nobody acts. > The abuse-c validation checks only whether the address can receive email. > This address can, but reports sent to it are not handled. The LIR and the > RIPE NCC both treat the successful validation as sufficient. > > Questions to the working group: > > Should documented, repeated non-response from an abuse-c be a reason for the > LIR to act on the assignment, in particular when the LIR leases the space via > a broker? > Is there support for extending ripe-705 or the validation procedure, so that > repeated non-handling reported with evidence triggers follow-up by the LIR? > Sources: > https://rest.db.ripe.net/ripe/organisation/ORG-OL329-RIPE > https://rest.db.ripe.net/ripe/inetnum/91.92.240.0%20-%2091.92.243.255/versions.json > https://www.spamhaus.org/sbl/query/SBL686264 > https://labs.ripe.net/author/angela_dallara/abuse-c-validation-update-on-progress-and-some-numbers/ > > Best regards, > Theo > > ----- > To unsubscribe from this mailing list or change your subscription options, > please visit: https://mailman.ripe.net/mailman3/lists/security-wg.ripe.net/ > As we have migrated to Mailman 3, you will need to create an account with the > email matching your subscription before you can change your settings. > More details at: https://www.ripe.net/membership/mail/mailman-3-migration/ ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.theipv6company.com The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.
----- To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/security-wg.ripe.net/ As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://www.ripe.net/membership/mail/mailman-3-migration/
