New user registration: "login has been temporarily blocked for this User"

Rocket.chat 3.10.3 is running just fine for my admin user. But when ever a new user registers the account seems to be blocked:

  1. user registers with name, email and password
  2. user gets email with link to verify email address
  3. user get “login has been temporarily blocked for this User” when he clicks the link “verify your email”

Also when the user goes to the login screen and enters his credentials, the same error appears.

All settings under accounts->registration and accounts->2FA are at default, I didn’t change anything.

Under Users->new user everything seems to be ok except for 2 things:

  1. username is empty although the new user did specify this
  2. email is not verified

What am I missing? What setting should be changed?

systemlog shows:
I20210118-11:30:19.338(0) Exception while invoking method login Error: Login has been temporarily blocked For User [error-login-blocked-for-user] at app/authentication/server/startup/index.js:308:9 at packages/callback-hook/hook.js:131:22 at packages/accounts-base/accounts_server.js:167:15 at Hook.each (packages/callback-hook/hook.js:109:15) at AccountsServer._validateLogin (packages/accounts-base/accounts_server.js:164:29) at AccountsServer._attemptLogin (packages/accounts-base/accounts_server.js:353:10) at MethodInvocation.methods.login (packages/accounts-base/accounts_server.js:535:23) at maybeAuditArgumentChecks (packages/ddp-server/livedata_server.js:1771:12) at packages/ddp-server/livedata_server.js:1689:15 at Meteor.EnvironmentVariable.EVp.withValue (packages/meteor.js:1234:12) at packages/ddp-server/livedata_server.js:1687:36 at new Promise (<anonymous>) at Server.applyAsync (packages/ddp-server/livedata_server.js:1686:12) at Server.apply (packages/ddp-server/livedata_server.js:1625:26) at Server.call (packages/ddp-server/livedata_server.js:1607:17) at Object.post (app/api/server/v1/misc.js:262:26) at app/api/server/api.js:394:82 at Meteor.EnvironmentVariable.EVp.withValue (packages/meteor.js:1234:12) at Object._internalRouteActionHandler [as action] (app/api/server/api.js:394:39) at Route.share.Route.Route._callEndpoint (packages/nimble_restivus/lib/route.coffee:150:32) at packages/nimble_restivus/lib/route.coffee:59:33 at packages/simple_json-routes.js:98:9 => awaited here: at Promise.await (/app/bundle/programs/server/npm/node_modules/meteor/promise/node_modules/meteor-promise/promise_server.js:60:12) at Server.apply (packages/ddp-server/livedata_server.js:1638:22) at Server.call (packages/ddp-server/livedata_server.js:1607:17) at Object.post (app/api/server/v1/misc.js:262:26) at app/api/server/api.js:394:82 at Meteor.EnvironmentVariable.EVp.withValue (packages/meteor.js:1234:12) at Object._internalRouteActionHandler [as action] (app/api/server/api.js:394:39) at Route.share.Route.Route._callEndpoint (packages/nimble_restivus/lib/route.coffee:150:32) at packages/nimble_restivus/lib/route.coffee:59:33 at packages/simple_json-routes.js:98:9