Short answer
Email abuse@firstnet.co.za with the evidence: IP addresses, timestamps with the time zone, full email headers for spam, and any URLs involved.
In detail: How do I report abuse coming from a FirstNet IP address?
An IP address on FirstNet's network may be in use by one of FirstNet's customers, so unwanted traffic such as excessive requests to your server, scanning, login attempts or spam often comes from a customer's system rather than from FirstNet itself. Detailed logs make that tracing much faster.
What to include in your report:
- The source IP addresses and the destination they reached.
- Timestamps with the time zone, ideally a few log lines showing the pattern.
- For spam: the full email headers, not only the message text.
- For unlawful content: the URLs.
Under FirstNet's Acceptable Use Policy, FirstNet may ask the customer to stop and fix the problem, block specific traffic, ports or destinations, suspend the affected service where needed to protect the network, or report the activity to law enforcement, regulators or ISPA.
Take-down notices for unlawful content under section 77 of the Electronic Communications and Transactions Act (ECTA) go to ISPA, which FirstNet has designated as its agent; the procedure and form are on ISPA's website. Child sexual abuse material can also be reported directly to the Film and Publication Board or the South African Police Service. Do not send copies of such material to FirstNet.
The full rules are in the Acceptable Use Policy on FirstNet's Legal notices page.