Yep fail2ban is indeed a great alternative way to tackle the issue. Although fail2ban works by blocking specific IPs. If the brute force specifies a new IP for each attempt, I'm not sure how that will be handled by fail2ban