All of our base OS templates come with fail2ban pre-installed as a security measure. As soon as an IP address is made public via internet it becomes open to unwarranted access. Having fail2ban installed and configured by default helps mitigate this risk faster, as soon as the machine is deployed.