BuddyPress.org

Solved. I’m an idiot.
user_spam_remover Plugin was improperly configured.

As a side note: If you use buddypress for commenting, the User Spam Remover plugin won’t pick up on buddypress activity as being actual site activity – thus causing users to be mistaken as spam bots.