In order to block a specific IP address, you need to add a Firewall filter rule.
Follow these steps to add filter rule using Winbox:
- Go to IP>Firewall;
- Select tab "Filter rules";
- Click on the + to add new rule;
- Select tab "General";
- Choose Chain: Input;
- Select Src. Address - input your desired IP;
- Select tab "Action";
- Choose Action: Drop;
- Click OK, and the desired IP address will be blocked by a firewall filter.
/ip firewall filter add chain=input src-address=22.214.171.124 action=drop
Chain "input" limit the connection to the device itself. To limit traffic going through the device use chain "forward". Please refer to the Building Your First Firewall