Binary package “libpam-abl” in ubuntu xenial

blocks hosts attempting a brute force attack

 a PAM module that provides auto blacklisting of hosts and users responsible
 for repeated failed authentication attempts. Generally configured so that
 blacklisted users still see normal login prompts but are guaranteed
 to fail to authenticate.