Mikrotik’s RouterOS has tarpit as a firewall action, from Manual:IP/Firewall/Filter - MikroTik Wiki
tarpit- captures and holds TCP connections (replies with SYN/ACK to the inbound TCP SYN packet)
On my previous Mikrotik router I used it on port 22, to slow down bots scanning and trying brute force SSH logins.
I currently use GitHub - skeeto/endlessh: SSH tarpit that slowly sends an endless banner, but I’d like to handle it in the router.