He's W-tapping, which makes it look like he has extended reach. He's also most likely jitter clicking which is letting him get way more hits off than you. He is legit.
Also, for your next report, I suggest turning off your clouds so you and staff can actually see the player.