Fail2ban doesn’t work well against residential bot nets. A single ip generally only makes a couple of requests before rotating.

ipsets can handle vast numbers of addresses. I'm sure fail2ban uses them these days.