It looks like there are a fairly decent number of spammer “groups” that utilize blocks of IP addresses.

It might be useful to remove what is likely isolated incidents of “evil”, look for patterns and then apply those types of patterns to IP address blocks that have growing amounts of “evil”.

Interestingly, it looks like the number of spammers is growing at a fairly decent clip.