To make remote attacks mitigation more efficient we can provide option to add attacker IPs to firwall list this way: https://forum.mikrotik.com/viewtopic.php?t=184113