DOCSIS (AKA internet service over coaxial cable) deals in some number of bonded channels, meaning portions of the total available bandwidth on the wire. They asymmetrically allocate channels to download speeds to overcome the limitations of the older copper wire technology. 100Mbps symmetrical is beyond what most of their existing “Broadband” infrastructure can support in rural and underserved areas, so they complained about it being unreasonable. 100Mbps symmetrical is certainly possible over DOCSIS, but speeds are only as fast as the weakest link… And there are a helluva lot of weak links outside of high population density areas.
My recollection is that Fail2Ban has some default settings, but is mostly reactionary in terms of blacklisting things that it observes trying to get in. Crowdsec behaves in a similar vein but, as the name implies, includes a lot of crowdsourced rules and preventative measures.