Some time ago, I deactivated fpcraig at this domain, after entering it into a "remove me" page. The spam bots are still hitting it—my mail host bounced ten messages in the last month—but even more troubling than that is that my gmail account with that alias is getting spammed. I can only infer that eventually every alias that has ever been identified at any domain will be tried at gmail.
As an experiment, I think I’ll set up an fpcraig alias in another domain I have access to, and which I know gets dictionary-spammed, to see if fpcraig is now just part of the spammers’ alias dictionary.
Update: five years on, I believe the gmail spam was due to some invitations I sent: I have not seen spam to fpcraig at any other domains I have access to.