To Mailgun's credit, within 48 hours they've identified the problematic client on the shared IP and have moved me to another one, for an account I'm not paying for.