I can't imagine a more bruteforce approach to a known pattern, then.

If the only indicator you have for spam potential is [created an acccount] + [was inactive for some period], I can't imagine the other myriad spam vectors aren't getting hammered 24/7.