that isn't exactly how IP spoofing works: i'd argue for the most part, ip spoofing is just a DDoS hassle. Its not very useful on a real service you intend to interact with (tcp/https require you to reply to those ip packets - it's not a fire and forget).