please allow ‘failed authentication’ → ‘add to address list’
it could cover SSTP, PPTP, Winbox, Telnet, etc.
We could choose what to do with the address lists, the expiry, whether to put them to a stage-2 address list or something.
But please it’s an important missing feature from all of the Mikrotik server services that use authentication.