Unfortunately no: content is encrypted by default so there's no way to tell what's in there.

Limited storage quotas for free users (per user & total) and dropping least recently requested files is the best spam prevention policy I can think of. Maybe combined with IP based filtering, although that can be bypassed.

I'm currently running my own cdn.iris.to (writes via upload.iris.to) which only allows encrypted binary uploads to avoid moderation issues.