hack.log entries are now created for >= 10 consecutive failed login attempts

from the same host (but not necessarily the same connection).
No login retry is allowed for suspected hackers (one authentication attempt per
connection).
Other FTP hack.log entries contain a little more detail about the type of
suspected hack attempt (e.g. "FTP BOUNCE").