Welp, after my spamnesty, including a restructuring of my fail2ban jails and drastic reduction in the number of regexps being processed, performance was pretty good for a while. But in the last 8 days I've already put a 30 day ban on over *1.6 million* IPs that hit the honeypot. And now fail2ban is using a bunch of CPU again. fail2ban.sqlite3 is 2.5G.
We used to be an internet.