Need to have all my spigot servers running on localhost 127.0.0.1, and bungeecord running on the dedicated ip under port 25565.
127.0.0.1 needs to be allowed to run on ports 25566, 25567, 25568, 25569, 25570.

This way the connection is more secure and players can only join through Bungeecord to connect.