ccr1036-8g-2s+EM prevent outgoing ddos

We have a ccr1036-8g-2s+EM for BGP and it happenend before that some servers where sending internal attacks or even outbound ddos attacks.

Is there a way to prevent if in RouterOS and for example auto-null the Server that is doing it?

Not talking about inbound, we are talking if OUTBOUND
For example one server gets hacked and goes rogue or a rogue customer is doing that.