Zero Trust

Port 2222

An attacker scans for SSH, finds port 2222 and walks straight into a honeypot. Zero trust, told from the defender's side.

UK Grime Zero trustSSH honeypotContainer sandboxingReverse proxy
0:003:00
Versions
Share on X

The story

Zero Trust is a break-in told from the other side of the door. Someone scans the block looking for an open port, finds SSH listening on 2222 and starts trying keys. What they have found is a honeypot: it looks real, it answers like a real server, and it logs every step they take. "You think you're talking to me, now you're kissing the script."

The verses walk through the defences that sit behind it. Every request has to prove itself before it gets anything. Workloads run in containers, sandboxed so that getting inside one gets you nothing else. A reverse proxy masks what is really there, every input is sanitised, and a process manager keeps services alive: kill one and it respawns. The logs remember, and the attacker ends up "just talking to a mirror".

Key lines

  • “I got keys but not the ones that start the whip”
  • “I see you scanning, I see you probing, but you're just talking to a mirror”
  • “PM2, keep heartbeats, processes alive”

Written and produced by NDGM (Nicholas Martin), made with Suno, 2026.