How to protect rclone serve SFTP on Windows?

Does anyone have any easy methods to protect rclone serve SFTP (available publicly over the internet) on Windows from brute force attacks with something like fail2ban for Linux? I would be willing to use Docker or a VM if necessary.

Without knowing your exact requirements, I tend to put things behind Cloudflare Access as it's free and easy to use.

Cloudflare Access | Zero Trust Application Access | Cloudflare

Do you know any guides on how to set up rclone serve with Cloudflare Zero Trust?

Not that I'm aware of as I've never tried it.

You'd have to experiment I'd imagine.