https://wiki.mikrotik.com/wiki/Bruteforce_login_prevention
/ip service disable ssh
/ip service set ssh address=172.16.1.5/32,10.1.1.0/24
/ip firewall add action=drop chain=input dst-port=22 protocol=tcp