How are your 'spammers' creating tickets? via web interface or via email? If via email, perhaps you could tighten the spam filtering on your email system so it doesn't even get parsed into osTicket? If via the web interface, perhaps enable the following setting under Emails>Settings

This has eliminated a lot of spam for us.