There's a lot of spam through the old logonce package, caused by rate limiting by the kernel on Linux.