I had My minecraft server scanned by at least 3 different bots, and I even had some friendly guy join my server that apparently found it using a bot he wrote. I’m now using a whitelist lol. One of the account names that scanned my server was "Fifth Column, which is a griefing group.
I basically do exactly this, but I am running the reverse proxy on my home computer: the VPS is literally just acting as a proxy, for which I use wireguard to tunnel the connection. So far it’s worked great, though initial setup was a pain.