On Commons we've setup filters to stop Wikipedia Zero abuse from new accounts. Due to quirks, newer established users never auto-login to Commons until they upload a video. They are then blocked by Filter 180 for looking like a newbie. They then complain and then a sysop flags them a few days later.
CentralAuth variables to consider adding to AbuseFilter:
- SUL merging/registration time
- Global edit count
- Combined list of all user groups (sysop on somewiki?)
- Home wiki domain or database name