Attention: this item is more than 5 years old, links can be broken and information can have been updated.
Currently over half of the incoming TCP SYN packets logged and dropped in my
firewall are for port 23 or port 2323. According to on-line sources this is
all related to the Mirai botnet and copycats of that botnet.