ALGERIE TELECOM / algerietelecom.dz / djaweb.dz continuously sustains IP addresses rated up to "critical" amounts of spam during a 30 day period.
www.senderbase.org/lookup/org/?search_string=Telecom%20Algeria (bottom of pages)
http://bgp.he.net/AS36947#_asinfo (ALGERIE TELECOM / algerietelecom.dz)
http://whois.domaintools.com/djaweb.dz (the registrant owner of djaweb.dz is ALGERIE TELECOM)
From a spam header: <CollinsJoanna3575@fedhainvestment.com>([220.127.116.11]) . "Invoice December 2015", multiples with malicious attachments. Not too concerned about the email address, probably a hacked account. This stuff needs to stop.