@Gargron Still the problem is Mastodon. See https://github.com/mastodon/mastodon/discussions/29267.
Please see these issues (two of them are created by me and are related) as well:
*Require blocking of disposable email providers and/or require a captcha provider when registrations are open*
https://github.com/mastodon/mastodon/issues/29270
*Set new registrations on new servers to manual approval by default*
https://github.com/mastodon/mastodon/issues/29269
*Ability to greylist new servers*
https://github.com/mastodon/mastodon/issues/29266
*Ability to use heuristic spam filtering tools*
https://github.com/mastodon/mastodon/issues/29265
*Instance-wide filtering*
https://github.com/mastodon/mastodon/issues/29256
cc @renchap