In truth, spammers can spoof IPs, there's quite a few programs out there for that, and can mask their locations so it's virtually impossible to hunt them down. Pro spammers use a new name with bogus return address for every spamming post. They are now using a type of AI reply system that replies to bulletin posts with buzzwords (look for the broken English) and appear to be human instead of a bot. They're quite vindictive. Confirmation via Tom makes good sense if spam is really getting bad in here.
I've kept a few AI spambot posts sent my way in Email. They're really disturbing to read.