May 2016 and May 2021:
Algerie Telecom / Algerie Telecom Mobile MOBILIS / ATM, DZ / algerietelecom.dz / djaweb.dz continuously sustains IP addresses rated up to "critical" amounts of spam during a 30 day period. And, CBL-listed, compromised IP addresses.
https://talosintelligence.com/reputation_center/lookup?search=Algerie%20Telecom%20Mobile%20MOBILIS (bottom of pages AND May 2021: CBL-listed, malware-infected IP addresses.)
http://bgp.he.net/AS36947#_asinfo (Algerie Telecom / algerietelecom.dz Also, AS327712 & AS33774)
http://whois.domaintools.com/djaweb.dz (the registrant owner of djaweb.dz is Algerie Telecom)
www.spamhaus.org/sbl/listings/djaweb.dz (djaweb.dz malware, phishing, spam reports)
From a spam header: <CollinsJoanna3575@fedhainvestment.com>([126.96.36.199]) . "Invoice December 2015", multiples with malicious attachments. Not too concerned about the email address, probably a hacked account. This stuff needs to stop.