Maybe the spammer is a smart spammer and just didn't do it in a way that'll get them caught.

That could be the case as doing occasional spam comments is much better than mass-spamming the website... We have a long-term dedicated spammer... 😂