Also, hosting vendors that allow customers to spoof source IPs. BCP38 would nicely fix all of that and most reputable hosting providers have it, but all it take

Also, hosting vendors that allow customers to spoof source IPs. BCP38 would nicely fix all of that and most reputable hosting providers have it, but all it takes is a few to not use it to give this possibility.