/ip firewall filter
add action=drop chain=forward comment="Block BruteForcers" in-interface-list=ISP src-address-list=BruteForcers
add action=jump chain=forward comment="RDP. Go into the chain for detecting Bruteforcers" connection-state=new dst-port=3389 in-interface-list=ISP jump-target=BruteForcersDetect protocol=tcp
add action=add-src-to-address-list address-list=BruteForcers address-list-timeout=1d chain=BruteForcersDetect comment="Adding an address to the list of Bruteforcers" log=yes src-address-list=BruteForcers_Step15
add action=add-src-to-address-list address-list=BruteForcers_Step15 address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step15 src-address-list=BruteForcers_Step14
add action=add-src-to-address-list address-list=BruteForcers_Step14 address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step14 src-address-list=BruteForcers_Step13
add action=add-src-to-address-list address-list=BruteForcers_Step13 address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step13 src-address-list=BruteForcers_Step12
add action=add-src-to-address-list address-list=BruteForcers_Step12 address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step12 src-address-list=BruteForcers_Step11
add action=add-src-to-address-list address-list=BruteForcers_Step11 address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step11 src-address-list=BruteForcers_Step10
add action=add-src-to-address-list address-list=BruteForcers_Step10 address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step10 src-address-list=BruteForcers_Step9
add action=add-src-to-address-list address-list=BruteForcers_Step9  address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step9  src-address-list=BruteForcers_Step8
add action=add-src-to-address-list address-list=BruteForcers_Step8  address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step8  src-address-list=BruteForcers_Step7
add action=add-src-to-address-list address-list=BruteForcers_Step7  address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step7  src-address-list=BruteForcers_Step6
add action=add-src-to-address-list address-list=BruteForcers_Step6  address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step6  src-address-list=BruteForcers_Step5
add action=add-src-to-address-list address-list=BruteForcers_Step5  address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step5  src-address-list=BruteForcers_Step4
add action=add-src-to-address-list address-list=BruteForcers_Step4  address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step4  src-address-list=BruteForcers_Step3
add action=add-src-to-address-list address-list=BruteForcers_Step3  address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step3  src-address-list=BruteForcers_Step2
add action=add-src-to-address-list address-list=BruteForcers_Step2  address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step2  src-address-list=BruteForcers_Step1
add action=add-src-to-address-list address-list=BruteForcers_Step1  address-list-timeout=30m chain=BruteForcersDetect comment=BruteForcers_Step1
add action=return chain=BruteForcersDetect comment="End of chain and return."