They bruteforce me, how to blacklist ?

PPTP should be avoided. Not secure at all.
Setup IPSec L2TP

Here is a script for IPSec L2TP
http://forum.mikrotik.com/t/black-list-for-failed-login-to-ipsec-vpn/130090/4