Figuring out where the spam came from doesn't prevent the spam coming. I would prefer a solution that prevents the spam from coming.

I built such a system. I made it available and nobody used it or cared. It works great for me.