It could be that he was using a VPN that masks his IP address. GlobalTeleHost provides that type of service (which could be resold by a 3rd party VPN service). Given that spammers probably use the same service to mask their IP, might not be surprising that his IP was caught in a spam filter.