'Something' has opened TCP Port 2323 (telnet) overnight while I was sleeping

I have the same problem as @WayOutWest, no ssh logged sessions at project.turris.cz. There should be at least one because I (successfully) hit the ssh honeypot from an outside network.

Well we looked to our data between my colleagues and we have new data. If you are sure that attackers can reach honeypot from internet then just wait till 3.9 is released. There is a planned replacement in form of haas service. So even if there is some bug in current honeypot that it doesn’t records attacks, it makes little to no sense to fix it in software that will be obsolete in few weeks. (just to emphasise, new data won’t be visible on project.turris.cz but on haas.nic.cz)