Well it depends. If you’re running the public relay that is being spammed, you can see what IP(s), ASNs, user agents, etc the spammer is using and rate limit on the network side.

If you’re an aggregator like filter.nostr.wine that doesn’t have that network view, then it’s MUCH more challenging. You need to focus more on the content/pattern of the messages and reputation of pubkey posting them.