Run a Transaction Details report that includes the spammer's transactions including the field/column "Client IP". Contact support with the resulting IP to have that IP blocked.