If they'd respect abuse complaints things could be different, some do, but way too much is just very malicious. In the context of email I heavily recommend req

If they'd respect abuse complaints things could be different, some do, but way too much is just very malicious. In the context of email I heavily recommend requiring SPF (just to exist even!) on things originating from China, Russia and VPS providers.