I don't run email for a company or have customers, it's just personal email accounts. I could block those sites easily but I've seen on rare occasion, legit email come through them.
Speaking of SpamAssassin, a blast from the past... https://lists.archive.carbon60.com/spamassassin/users/199808...
In my former life at a medium sized company I tacked on points in SpamAssassin for those senders especially for the generic PTR records that aggregate their smaller accounts. I left the bigger accounts alone that had their own company specific SNAT addresses, DNS and swipped CIDR blocks unless they were abusive.