For anybody who was interested, just wanted to update that it turns out the changes I made back in late Nov actually did resolve everything. It just took a few more days for the spammer to realize nothing was getting through anymore and to stop trying. I haven't seen any attempts since a couple days after I made the changes.