If you look at the firewall rules created by Advanced Security when Hacker IP Protection is enabled, you will see that several rule blocks are created:



Then, within each block, we have a large number of blocked addresses:


So for many blocked IP addresses, these addresses are in a range format.
For example, in the previous screenshot, the first range is: 103.118.28.0 - 103.118.31.255



All IP addresses in this range are blocked. On this single line, that's 4 x 255 = 1020 addresses actually blocked.
Therefore, we can easily fit 564 million blocked addresses into these few firewall rules.