Any MikroTik router from the basic to the most advanced will allow us to block port scanning attacks. To do this you have to create filter rules to block the scanning.

MikroTik offers various security features on its routers to protect networks against unauthorized access and various forms of attacks, including port scans performed by tools such as Nmap. However, the ability to block or mitigate Nmap scans is not limited to a specific MikroTik model or determined by the computer's serial number. Instead, this capability is more related to the RouterOS version and the settings applied by the network administrator.

To protect a network against Nmap scans using a MikroTik device, several security techniques can be applied through firewall rules in RouterOS, such as:

1. Blockade of Common Ports: Configure firewall rules to reject or discard traffic to commonly scanned ports.
2. Port Scan Detection: Use firewall functionality to identify port scanning patterns and dynamically block source IP addresses.
3. Connection Limitation: Set rules to limit the number of connection attempts allowed from an IP address in a period of time, which can help mitigate aggressive scans.

These functionalities are available in multiple versions of RouterOS and therefore in a wide range of MikroTik devices, from home routers to enterprise-grade equipment. The effectiveness of these measures depends on correctly configuring and maintaining firewall rules, as well as keeping the RouterOS operating system up to date to protect against known vulnerabilities and evasion techniques.

If you have a MikroTik device and want to configure it to improve security against Nmap scans or any other port scanning tools, I would recommend reviewing the official MikroTik documentation and considering the following practices:

• Keep RouterOS updated to the latest stable version.
• Use the “Address List” and “Firewall Rules” to define and apply security policies.
• Configure the “Intrusion Detection Service” (IDS) if your version of RouterOS supports it.
• Establish strict access policies for router management access control.

Implementing these configurations may require advanced networking and security knowledge, so if you are not familiar with these topics, it may be helpful to consult a network security professional or refer to the MikroTik community resources and discussion forums, where many users share their experiences and security configurations.