I used to set up Fail2Ban on any new server, but in the classic case of using it to protect SSH, I haven't allowed password logins for a long time, and so all it really does is cut down on log noise.
Now the failed logins on ssh is down to 1-2 per day instead of hundreds.