You can't spoof an IP in ET, but you can spoof a GUID, but GUIDs aren't the case here, he had none.