Currently, ip_reputation_* AbuseFilter variables are not computed for autocreations of named accounts (AbuseFilterHandler::shouldGenerateVariableValue), which makes sense from a security perspective. However, this allows sockpuppet abusers to evade local filters by creating accounts on other projects. For example:

1. A project has a filter that monitors ip_reputation_* variables and disallows account creations from open proxies.
2. A bad-faith actor creates an account via an otherwise blocked open proxy on project A, then autocreates the account on project B to evade the filter and engage in vandalism.

To address this issue, I propose computing these variables for autocreations of very new named accounts. The conditions must be designed carefully to avoid PII leaks, but thresholds such as "less than 96 hours (4 days) since global account creation and/or fewer than 5 global edits" seem reasonable to me.