tpotce VS mhn

Have a look at tpot created by Deutsche Telekom. https://github.com/telekom-security/tpotce

After installing proxmox, I created a VM on it containing t-pot, an (.iso) packaged group of containerized honeypots with a compelling aggregation of logs, attack attempts, a heatmap showing attack/scan locations, ips, and numerous other criteria logged and viewable in pretty elasticsearch dashboards.

The Data for https://www.sicherheitstacho.eu/start/main comes from their Honeypot Software https://github.com/telekom-security/tpotce

As for blue team, there is tpotce which is a fully integrated Linux distro that deploys multiple honeypot containers and connects them back up into Elastic Search, but you'd need a device with 8GB+ RAM facing the internet unrestricted in a DMZ or something similar - https://github.com/telekom-security/tpotce

T-Pot - The All In One Honeypot Platform - T-Pot

I use it to run Splunk at home for testing. You can also run honeypots or use TPot.

Check this https://github.com/telekom-security/tpotce

If you want a live threat map/Honeypot and get a feel for what's attacking your network while also looking amazing, set up the T-pot - https://github.com/telekom-security/tpotce

See MHN https://github.com/pwnlandia/mhn

I use https://github.com/pwnlandia/mhn but I will warn you now, its been a while since any updates came in. But it runs well on small VMs and I have the scattered through all the networks I work with.