tpotce VS Hauk

Have a look at tpot created by Deutsche Telekom. https://github.com/telekom-security/tpotce

After installing proxmox, I created a VM on it containing t-pot, an (.iso) packaged group of containerized honeypots with a compelling aggregation of logs, attack attempts, a heatmap showing attack/scan locations, ips, and numerous other criteria logged and viewable in pretty elasticsearch dashboards.

The Data for https://www.sicherheitstacho.eu/start/main comes from their Honeypot Software https://github.com/telekom-security/tpotce

As for blue team, there is tpotce which is a fully integrated Linux distro that deploys multiple honeypot containers and connects them back up into Elastic Search, but you'd need a device with 8GB+ RAM facing the internet unrestricted in a DMZ or something similar - https://github.com/telekom-security/tpotce

T-Pot - The All In One Honeypot Platform - T-Pot

I use it to run Splunk at home for testing. You can also run honeypots or use TPot.

Check this https://github.com/telekom-security/tpotce

If you want a live threat map/Honeypot and get a feel for what's attacking your network while also looking amazing, set up the T-pot - https://github.com/telekom-security/tpotce

Hmm. My favorite thing I never actually used — Hauk. Location sharing. I.e. install app on your phone, it creates a link that you can send to someone, and they would see your location on a map on your server.

If you only run official containers from popular repositories, and not less known repositories (which carry more risk), then the normal Rootful Docker is fine.\ I like running smaller projects such as https://github.com/bilde2910/Hauk/, so just in case the Docker image gets infected because e.g. the dev gets hacked, I run Rootless Docker to prevent damage.

If you don't mind self-hosting, check out Hauk.

Hauk https://github.com/bilde2910/Hauk (my first choice)

I'm not sure if this is what you want, but there's something called Hauk you can host yourself.