It looks like all the spam I've seen are from newly registered accounts. Perhaps this is something you've already considered, but would shutting off registration on kbin.social and pointing people to other instances until things are more manageable help?