They have already been blocked and the spam removed.

Thanks.

FWIW the Trac instance is still getting spammed; see tickets 5, 6, and 7 here:
https://fedorahosted.org/2to3c/query

Users were: "supportemail" (ticket 5) and "ragahgahfghagfh" (tickets 6 and 7).

Reopening this; hope that's appropriate.

Is there some way to add some kind of spam-detection logic to Trac ticket-filing (and other Fedora services, I guess), and auto-block bogus "Fedora users" based on that? (possibly using fedmsg - apps that think they're being spammed could send messages on the bus, and the accounts service count listen for the messages, and take action accordingly?)

The two spam accounts have also been fighting over the wiki:
https://fedorahosted.org/2to3c/wiki/WikiStart?action=history

For now I've disabled permissions on that Trac instance for "authenticated" users

sure, you're welcome to reopen, but we are aware and working on it already. :)

I blocked/deleted a ton of spam last night, and now patrick is tuning our spam checking account app.

Hopefully things will be back to normal soon...

ok. We have deployed our basset plugin, so it should now be watching for spam commits, deleting them and deactivating the users.

If you notice any spam that exists for more than an hour or so please let us know, but it should get automatically cleaned up moving forward.