Crowdsec needs internet to install it but after it is like fail2ban we read and parse logs. I must admit I do not understand the issue because a server gets a connectivity if you want to install modules or to serve informations to clients.
Btw yes fail2ban can be installed/configured but no plan right now as official module I bet