from the same host (but not necessarily the same connection).
No login retry is allowed for suspected hackers (one authentication attempt per
connection).
Other FTP hack.log entries contain a little more detail about the type of
suspected hack attempt (e.g. "FTP BOUNCE").