Unless you are running your system as a virtual one, retaliation and damage to your real system is a possibility. All kinds of havoc can be done to you, so may not be worth the risk. Once a hacker knows of you, hard to disengage from.
Suggest leaving it to the pros here.
EDIT: As DavidR says below, any action not legal can get you in serious trouble. To clarify, going after a hacker/spammer is not a good idea. Bad idea, in fact.