One thing you could do, especially if you have multiple IPv4 addresses, is use something like nginx to proxy all of them back to the minecraft server, then script nginx to monitor the amount of traffic through each and turn them on/off to prevent DDOS. Or even better, write a server to sit in front of the minecraft server and generate a custom IP/port for every player that would only work for them, and monitor each one for abuse.