This has been resolved in LACNIC, APNIC and AFRINIC by means of a policy proposal that ensures not just the validation but the response (in AFRINIC not yet implemented).

We had a previous attempt to do that in RIPE, but it according to the chairs didn’t reach consensus.

https://www.ripe.net/community/policies/proposals/2019-04/

Regards,
Jordi

@jordipalet

El 25 sept 2026, a las 22:58, Theo Plooij <theoplooij@gmail.com> escribió:

Hello all,

I would like to raise a case that shows a gap between abuse-c validation and abuse handling in practice.

The assignment 91.92.243.0/24 (ASSIGNED PA, org ORG-OL329-RIPE, Omegatech LTD, Seychelles) is maintained by LIR MGN Teknoloji A.S. (lir-tr-mgn-1-MNT) and announced by AS202412. Since August 2026 it has hosted an active phishing operation aimed at Dutch consumers on 91.92.243.136. Spamhaus lists the /22 as SBL686264.

Timeline:

  • 18 August, 22 August, 5 September and 7 September 2026: reports to the abuse contact abuse@omegatech.sc. No reply, no acknowledgement of receipt. The phishing pages remain online.
  • 24 September 2026: report to the LIR. The LIR confirmed that it holds the resource, stated that the /24 is leased via a third-party broker, and referred me back to abuse@omegatech.sc. According to the LIR, the RIPE NCC confirmed on 17 September 2026 that this address is valid.
  • 24 September 2026: report to the RIPE NCC (ticket 1112396). On 25 September the RIPE NCC replied that its role is limited to ensuring that the abuse contact is valid, and that handling reports is up to the network operator.

Each party acts within its own mandate, and the result is that nobody acts. The abuse-c validation checks only whether the address can receive email. This address can, but reports sent to it are not handled. The LIR and the RIPE NCC both treat the successful validation as sufficient.

Questions to the working group:

  1. Should documented, repeated non-response from an abuse-c be a reason for the LIR to act on the assignment, in particular when the LIR leases the space via a broker?
  2. Is there support for extending ripe-705 or the validation procedure, so that repeated non-handling reported with evidence triggers follow-up by the LIR?

Sources:
https://rest.db.ripe.net/ripe/organisation/ORG-OL329-RIPE
https://rest.db.ripe.net/ripe/inetnum/91.92.240.0%20-%2091.92.243.255/versions.json
https://www.spamhaus.org/sbl/query/SBL686264
https://labs.ripe.net/author/angela_dallara/abuse-c-validation-update-on-progress-and-some-numbers/

Best regards,
Theo

-----
To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/security-wg.ripe.net/
As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings.
More details at: https://www.ripe.net/membership/mail/mailman-3-migration/


**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.