I have a two way of doing this.
-
Block any user who tries a port that is not open and block all port for 24 hour.
http://forum.mikrotik.com/t/configuration-to-block-users-that-tries-to-access-router-on-non-open-port-s/151840/1 -
Some service port as a limit number of reconnecting before blocked.
http://forum.mikrotik.com/t/ftp-bruteforce-protection/121925/2