Who’s number
Gauteng South Africa
 Nov 23rd, 2017
No
Gauteng South Africa
 Nov 23rd, 2017
Below are the list of email addresses I suggest that your complaint be sent to. Of course if you leave out a portion of the complain (exp: ISPs of the DNSs) be sure to leave out the corresponding email addresses.


spam@uce.gov, abuse@xo.com, abuse@xo.net, abuse@tinet.net, abuse@tiscali.com, abuse@tiscali.it, abuse@it.tiscali.com, abuse@uk.tiscali.com, abuse@as9105.com, abuse@tiscali.co.uk, abuse@ip.tiscali.net, abuse@qwest.net, abuse@qwestip.net, ec2-abuse@amazon.com, abuse@amazon.com, abuse@hangti.me, abuse@amazonaws.com, email-abuse@amazon.com, noc@amazon.com ipadmin@north.cn.net, abuse@ec2-50-19-106-47.compute-1.amazonaws.com, abuse@compute-1.amazonaws.com, abuse@ec2-174-129-43-177.compute-1.amazonaws.com, abuse@cloudfront.net, abuse@server-54-230-89-122.ind6.r.cloudfront.net, abuse@ind6.r.cloudfront.net, abuse@r.cloudfront.net, abuse@server-54-230-89-179.ind6.r.cloudfront.net, abuse@server-54-230-90-94.ind6.r.cloudfront.net, abuse@server-54-230-91-33.ind6.r.cloudfront.net, abuse@server-54-230-91-102.ind6.r.cloudfront.net, abuse@server-205-251-253-127.ind6.r.cloudfront.net, abuse@server-205-251-253-199.ind6.r.cloudfront.net, abuse@server-54-230-89-84.ind6.r.cloudfront.net, abuse@server-54-240-164-202.nrt54.r.cloudfront.net, abuse@nrt54.r.cloudfront.net, abuse@server-54-230-113-37.nrt54.r.cloudfront.net, abuse@server-54-230-114-221.nrt54.r.cloudfront.net, abuse@server-54-230-115-213.nrt54.r.cloudfront.net, abuse@server-54-230-112-247.nrt54.r.cloudfront.net, abuse@server-54-230-114-86.nrt54.r.cloudfront.net, abuse@server-54-240-164-127.nrt54.r.cloudfront.net, abuse@server-54-230-112-155.nrt54.r.cloudfront.net, abuse@server-216-137-41-192.ewr2.r.cloudfront.net, abuse@ewr2.r.cloudfront.net, abuse@server-54-230-23-104.ewr2.r.cloudfront.net, abuse@server-216-137-41-208.ewr2.r.cloudfront.net, abuse@server-54-230-20-155.ewr2.r.cloudfront.net, abuse@server-54-230-21-239.ewr2.r.cloudfront.net, abuse@server-54-230-20-132.ewr2.r.cloudfront.net, abuse@server-54-230-22-221.ewr2.r.cloudfront.net, abuse@server-54-230-23-126.ewr2.r.cloudfront.net, abuse@server-54-230-119-91.sfo9.r.cloudfront.net, abuse@sfo9.r.cloudfront.net, abuse@server-54-230-117-57.sfo9.r.cloudfront.net, abuse@server-54-239-132-83.sfo9.r.cloudfront.net, abuse@server-54-230-117-220.sfo9.r.cloudfront.net, abuse@server-54-230-116-204.sfo9.r.cloudfront.net, abuse@server-54-230-117-69.sfo9.r.cloudfront.net, abuse@server-54-230-119-195.sfo9.r.cloudfront.net, abuse@server-54-230-117-157.sfo9.r.cloudfront.net, abuse@awsdns-20.co.uk, abuse@ns-1699.awsdns-20.co.uk, abuse@awsdns-40.com, abuse@ns-320.awsdns-40.com, abuse@awsdns-11.org, abuse@ns-1116.awsdns-11.org, abuse@awsdns-57.net, abuse@ns-975.awsdns-57.net, abuse@ns-01.cloudfront.net, abuse@awsdns-19.net, abuse@ns-666.awsdns-19.net, abuse@awsdns-52.com, abuse@ns-418.awsdns-52.com, abuse@awsdns-07.co.uk, abuse@ns-1597.awsdns-07.co.uk, abuse@awsdns-35.org, abuse@ns-1306.awsdns-35.org, abuse@google.com, abuse@googleapis.com, abuse@1e100.net, abuse@ie-in-f95.1e100.net, abuse@anti-spam.cn, abuse@ns.chinanet.cn.net, abuse@chinanet.cn.net, abuse@cn.net, abuse@chinatelecom.com.cn, abuse@cndata.com, abuse@cogentco.com, abuse@psi.com, abuse@akamai.com, abuse@cnisp.org.cn, abuse@163.com, abuse@12321.cn, abuse@corp.netease.com, abuse@netease.com, abuse@ccert.edu.cn, abuse@edu.cn, abuse@net.edu.cn, abuse@ac.cn, abuse@cnisp.org, abuse@north.cn.net, abuse@apple.com, abuse@akamaitechnologies.com, abuse@deploy.static.akamaitechnologies.com, abuse@static.akamaitechnologies.com, abuse@akamaihd.net, spam@tiscali.com, spam@it.tiscali.com, spam@uk.tiscali.com, spam@amazon.com, spam@hangti.me, spam@amazonaws.com, spam@ec2-50-19-106-47.compute-1.amazonaws.com, spam@compute-1.amazonaws.com, spam@ec2-174-129-43-177.compute-1.amazonaws.com, spam@cloudfront.net, spam@awsdns-20.co.uk, spam@ns-1699.awsdns-20.co.uk, spam@awsdns-40.com, spam@ns-320.awsdns-40.com, spam@awsdns-11.org, spam@ns-1116.awsdns-11.org, spam@awsdns-57.net, spam@ns-975.awsdns-57.net, spam@ns-01.cloudfront.net, spam@awsdns-19.net, spam@ns-666.awsdns-19.net, spam@awsdns-52.com, spam@ns-418.awsdns-52.com, spam@awsdns-07.co.uk, spam@ns-1597.awsdns-07.co.uk, spam@awsdns-35.org, spam@ns-1306.awsdns-35.org, anti-spam@ns.chinanet.cn.net, spam@ccert.edu.cn, spam@chinanet.cn.net, spam@chinatelecom.com.cn, spam@cndata.com, anti-spam@chinanet.cn.net, spam@163.com, spam@edu.cn, nsadmin@corp.netease.com, postmaster@netease.com, hostmaster@netease.com, webmaster@netease.com, noc@netease.com, admin@netease.com, info@netease.com, support@netease.com, tech@netease.com, help@netease.com, cs@netease.com, legal@netease.com, root@netease.com, network@netease.com, privacy@netease.com, supervise@cnnic.cn, administrator@netease.com, security@tiscali.com, security@it.tiscali.com, security@uk.tiscali.com, security@amazon.com, security@google.com, security@chinanet.cn.net, security@chinatelecom.com.cn, security@cndata.com, security@ns.chinanet.cn.net
Greg
 Jan 22nd, 2014
COPY OF COMPLAINT SENT TO SERVICE PROVIDERS (feel free to copy or edit this for your complaint):

SUBJECT: Abuse of XO California/Tiscali/Qwest/Amazoncom/Tinet/Amazon Tech/A100 US/Google/Akamai/Beijing Neteon Tech/PSI/Cogent/CHINANET-TIANJIN networks by spammer



A spammer sent a spam-SMS-text from 4158151417 (XO California) to my cell phone
(which, in addition to being prohibited under rules concerning cell phones, is
also illegal since my number is on the federal Do Not Call list)
advertising the following URL:
h t t p : / / hangti.me/h1aSPGHjc2
Which is on the Amazon network, and uses DNSs and webpages on other networks.
Please promptly shut down all resources abused by this spammer.



This is a report of SMS-text spam:

1) Abuse of XO California Inc
Spam SMS Text sent from 4158151417 at 01/19/2014 11:03 PST.
2) Abuse of Tiscali router 89.149.184.154/ Qwest router 72.165.86.74/ Amazon.com, Inc.:
NOTE THAT Amazon.com is a KNOWN SPAMHAUS - see:
h t t p : / / www.spamhaus.org/sbl/sbl.lasso?query=SBL116110
h t t p : / / www.spamhaus.org/sbl/listings.lasso?isp=amazon.com
1) Advertised via spam: hangti.me [50.19.106.47]
h t t p :// hangti.me/h1aSPGHjc2
2) Spammer's websites: d29v6boww90nnx.cloudfront.net [205.251.253.127 205.251.253.199
216.137.41.192 216.137.41.208]
hangti.me [50.19.106.47]
3) Abused Domain Name Servers: ns-1699.awsdns-20.co.uk [205.251.198.163],
ns-320.awsdns-40.com [205.251.193.64], ns-1116.awsdns-11.org [205.251.196.92],
ns-975.awsdns-57.net [205.251.195.207], ns-01.cloudfront.net [207.171.170.1],
ns-666.awsdns-19.net [205.251.194.154], ns-418.awsdns-52.com [205.251.193.162],
ns-1597.awsdns-07.co.uk [205.251.198.61], ns-1306.awsdns-35.org [205.251.197.26]
3) Abuse of Tiscali router 216.221.156.186/ Qwest router 72.165.86.90/ Tinet/Tiscali router
89.149.183.66/ Amazon.com, Inc.:
NOTE THAT Amazon.com is a KNOWN SPAMHAUS - see:
h t t p : / / www.spamhaus.org/sbl/sbl.lasso?query=SBL116110
h t t p : / / www.spamhaus.org/sbl/listings.lasso?isp=amazon.com
Advertised via spam: hangti.me [174.129.43.177]
h t t p :// hangti.me/h1aSPGHjc2
4) Abuse of Amazon Technologies Inc./Amazon.com, Inc.:
Spammer's website: d29v6boww90nnx.cloudfront.net [54.230.89.122 54.230.89.179 etc]
5) Abuse of Amazon Technologies Inc./A100 US LLC:
Spammer's website: d29v6boww90nnx.cloudfront.net [54.240.164.202 54.240.164.127]
6) Abuse of Akamai:
Spammer's websites: itunes.apple.com [23.197.18.217 23.73.66.217 etc]
7) Abuse of Beijing Neteon Tech Co, Ltd.:
Spammer's website: itunes.apple.com [118.186.134.39] (/us/app/)
8) Abuse of PSI-Cogent router 38.104.83.65/ CHINANET-TIANJIN:
NOTE THAT CHINANET/China Unicom/China Telecom has non-functioning contact info
(ie: anti-spam@ns.chinanet.cn.net) and is a KNOWN SPAMHAUS - see:
h t t p : / / www.spamhaus.org/sbl/listings/chinanet-gz
Spammer's website: itunes.apple.com [123.150.49.17] (/us/app/)
9) Abuse of Google:
Spammer's website: maps.googleapis.com [74.125.142.95 74.125.128.95 173.194.74.95]





The spam SMS text was sent from phone number 4158151417
4158151417 is a phone number administered by XO California Inc, at
01/19/2014 11:03 PST.

Appearing in the spam:
The URL h t t p : / / hangti.me/h1aSPGHjc2 The hostname hangti.me resolves to:
50.19.106.47, 174.129.43.177. 50.19.106.47 is on the Tiscali router
89.149.184.154/ Qwest router 72.165.86.74/ Amazon.com, Inc. network.
174.129.43.177 is on the Tiscali router 216.221.156.186/ Qwest router
72.165.86.90/ Tinet/Tiscali router 89.149.183.66/ Amazon.com, Inc. network. The
domain hangti.me uses the Name Servers: ns-1699.awsdns-20.co.uk
[205.251.198.163], ns-320.awsdns-40.com [205.251.193.64], ns-1116.awsdns-11.org
[205.251.196.92], ns-975.awsdns-57.net [205.251.195.207]. 205.251.198.163 is on
the Tiscali router 89.149.184.154/ Qwest router 72.165.86.74/ Amazon.com, Inc.
network. 205.251.193.64 is on the Tiscali router 89.149.184.154/ Qwest router
72.165.86.74/ Amazon.com, Inc. network. 205.251.196.92 is on the Tiscali router
89.149.184.154/ Qwest router 72.165.86.74/ Amazon.com, Inc. network.
205.251.195.207 is on the Tiscali router 89.149.184.154/ Qwest router
72.165.86.74/ Amazon.com, Inc. network.

The webpage h t t p : / / hangti.me/h1aSPGHjc2 references (items 1-10):
1) The URL h t t p s:/ / d29v6boww90nnx.cloudfront.net/css/styles.39b31e38.css The
hostname d29v6boww90nnx.cloudfront.net resolves to multiple IPs, such as:
54.230.89.122, 205.251.253.127, 54.240.164.202. 54.230.89.122 is on the Amazon
Technologies Inc./Amazon.com, Inc. network. 205.251.253.127 is on the Tiscali
router 89.149.184.154/ Qwest router 72.165.86.74/ Amazon.com, Inc. network.
54.240.164.202 is on the Amazon Technologies Inc./A100 US LLC network. The domain
cloudfront.net uses the Name Servers: ns-01.cloudfront.net [207.171.170.1],
ns-666.awsdns-19.net [205.251.194.154], ns-418.awsdns-52.com [205.251.193.162],
ns-1597.awsdns-07.co.uk [205.251.198.61], ns-1306.awsdns-35.org [205.251.197.26].
207.171.170.1 is on the Tiscali router 89.149.184.154/ Qwest router 72.165.86.74/
Amazon.com, Inc. network. 205.251.194.154 is on the Tiscali router
89.149.184.154/ Qwest router 72.165.86.74/ Amazon.com, Inc. network.
205.251.193.162 is on the Tiscali router 89.149.184.154/ Qwest router
72.165.86.74/ Amazon.com, Inc. network. 205.251.198.61 is on the Tiscali router
89.149.184.154/ Qwest router 72.165.86.74/ Amazon.com, Inc. network.
205.251.197.26 is on the Tiscali router 89.149.184.154/ Qwest router
72.165.86.74/ Amazon.com, Inc. network.
2) The URL // netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css
which is
h t t p : / / hangti.me/netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css

3) The URL h t t p s : / / d29v6boww90nnx.cloudfront.net/img/touch-icon.33e579ac.png
4) The URL /timeline/2014-01-14 which is h t t p :// hangti.me/timeline/2014-01-14
5) The URL h t t p : / / itunes.apple.com/us/app/id570448129 The hostname
itunes.apple.com resolves to multiple IPs, such as: 23.197.18.217,
118.186.134.39, 123.150.49.17. 23.197.18.217 is on the Akamai network.
118.186.134.39 is on the Beijing Neteon Tech Co, Ltd. network. 123.150.49.17 is
on the PSI-Cogent router 38.104.83.65/ CHINANET-TIANJIN network.
6) The URL
h t t p s : / / fbcdn-profile-a.akamaihd.net/hprofile-ak-prn1/t5/211319_115-638-0126_785160205_q.jpg
The hostname fbcdn-profile-a.akamaihd.net resolves to multiple IPs, such as:
23.63.226.169. 23.63.226.169 is on the Akamai network.
7) The URL
h t t p s : / / d29v6boww90nnx.cloudfront.net/js/templates/partials.min.1f096593.js
8) The URL h t t p s : / / d29v6boww90nnx.cloudfront.net/js/lib/spine.min.d269fa04.js
9) The URL h t t p s : / / d29v6boww90nnx.cloudfront.net/js/browserify.min.e696daf8.js
10) The URL h t t p : / / maps.googleapis.com/maps/api/js?libraries=places&sensor=false
The hostname maps.googleapis.com resolves to multiple IPs, such as:
74.125.142.95. 74.125.142.95 is on the Google network.




To XO California Inc
-----------------------------------------
Due to abuse, please do not allow this spammer to use:
Spam SMS Text sent from 4158151417 at 01/19/2014 11:03 PST


To Tiscali router 89.149.184.154/ Qwest router 72.165.86.74/ Amazon.com, Inc.
-----------------------------------------
Due to abuse, please do not allow this spammer to use the following (items 1-3):
1) hangti.me [50.19.106.47]
2) d29v6boww90nnx.cloudfront.net [205.251.253.127 205.251.253.199 216.137.41.192
216.137.41.208] (/css/, /img/, /js/templates/, /js/lib/, /js/)
hangti.me [50.19.106.47] (/netdna.bootstrapcdn.com/font-awesome/4.0.3/css/,
/timeline/)
3) ns-1699.awsdns-20.co.uk [205.251.198.163], ns-320.awsdns-40.com
[205.251.193.64], ns-1116.awsdns-11.org [205.251.196.92], ns-975.awsdns-57.net
[205.251.195.207], ns-01.cloudfront.net [207.171.170.1], ns-666.awsdns-19.net
[205.251.194.154], ns-418.awsdns-52.com [205.251.193.162],
ns-1597.awsdns-07.co.uk [205.251.198.61], ns-1306.awsdns-35.org [205.251.197.26]


To Tiscali router 216.221.156.186/ Qwest router 72.165.86.90/ Tinet/Tiscali router
89.149.183.66/ Amazon.com, Inc.
-----------------------------------------
Due to abuse, please do not allow this spammer to use the following (items 1-2):
1) hangti.me [174.129.43.177]
2) hangti.me [174.129.43.177] (/netdna.bootstrapcdn.com/font-awesome/4.0.3/css/,
/timeline/)


To Google
-----------------------------------------
Due to abuse, please do not allow this spammer to use:
maps.googleapis.com [74.125.142.95 74.125.128.95 173.194.74.95] (/maps/api/)


To Amazon Technologies Inc./Amazon.com, Inc.
-----------------------------------------
Due to abuse, please do not allow this spammer to use:
d29v6boww90nnx.cloudfront.net [54.230.89.122 54.230.89.179 54.230.90.94
54.230.91.33 54.230.91.102 54.230.89.84 54.230.113.37 54.230.114.221
54.230.115.213 54.230.112.247 54.230.114.86 54.230.112.155 54.230.23.104
54.230.20.155 54.230.21.239 54.230.20.132 54.230.22.221 54.230.23.126
54.230.119.91 54.230.117.57 54.239.132.83 54.230.117.220 54.230.116.204
54.230.117.69 54.230.119.195 54.230.117.157] (/css/, /img/, /js/templates/,
/js/lib/, /js/)


To Amazon Technologies Inc./A100 US LLC
-----------------------------------------
Due to abuse, please do not allow this spammer to use:
d29v6boww90nnx.cloudfront.net [54.240.164.202 54.240.164.127] (/css/, /img/,
/js/templates/, /js/lib/, /js/)


To Akamai
-----------------------------------------
Due to abuse, please do not allow this spammer to use:
itunes.apple.com [23.197.18.217 23.73.66.217 23.203.146.217] (/us/app/)
fbcdn-profile-a.akamaihd.net [23.63.226.169 23.63.226.104 23.63.226.106
23.63.226.123 23.63.226.136 23.63.226.138 23.63.226.139 23.63.226.146
23.63.226.162 72.246.189.242 72.246.190.16 72.246.190.42 72.246.189.233
72.246.189.225 72.246.190.43 72.246.190.35 72.246.189.227 72.246.189.234
23.3.96.138 23.3.96.80 23.3.96.145 23.3.96.81 23.3.96.88 23.3.96.83 23.3.96.136
23.3.96.137 23.3.96.90 23.0.163.98 23.0.163.113 23.0.163.114 23.0.163.99
23.0.163.82 23.0.163.112 23.0.163.74 23.0.163.67 23.0.163.64]
(/hprofile-ak-prn1/t5/)


To Beijing Neteon Tech Co, Ltd.
-----------------------------------------
Due to abuse, please do not allow this spammer to use:
itunes.apple.com [118.186.134.39] (/us/app/)


To PSI-Cogent router 38.104.83.65/ CHINANET-TIANJIN
-----------------------------------------
Due to abuse, please do not allow this spammer to use:
itunes.apple.com [123.150.49.17] (/us/app/)






Thanks for you prompt investigation and decisive action
to prevent future abuse
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Below is a copy of the SMS text spam sent from 4158151417
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Molly Fuega Googan shared events with you on Hangtime. h t t p :// hangti.me/h1aSPGHjc2
Greg
 Jan 21st, 2014
This subhuman cockroach turd not only texted my number which is on the DNC list, they sent spam advertising the URL of a website, and it was sent to my cell phone. I am going to do my absolute best to make them pay dearly for this, and I invite everyone else to do the same. I will:

1) report them to the DNCL complaint website
2) file a form 1088 with the FTC due to them calling my cell phone
3) will report the spam-advertised website, and the links appearing on it to the respective ISPs, asking that the spammers' resource be terminated (ie: accounts, websites, DNSs of the hostnames, any email addresses, etc). This report is in preparation currently. When it is complete I will post a copy here (test of the report, along with suggested abuse-reporting email addresses to send it to). I invite everyone who reads this to also send a copy of the complaint report to those email addresses.

Make the spammers hurt.
Greg
 Jan 19th, 2014

5 Comments