Some URLs are not picked up by HellPot

[JC5]

I'm not sure if this is my fault or not, but I appreciate the feedback.

I've set up HellPot to respond to ALL requests. See the config below. Despite this config and the setup in nginx (also below) some URLs still return 404 Not Found. I am not sure why

Please note that the "error.crt" in my nginx config is a simple self-signed certificate that already blocks some malicious clients.

nginx config

server {
    listen      80 default_server;
    listen 443 ssl http2 default_server;
    listen [::]:443 ssl http2 default_server;
    server_name _;
    location / {
        limit_rate 5k;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_pass http://127.0.0.1:8081$request_uri;
    }
    ssl_certificate     /etc/openresty/tls/error.crt;
    ssl_certificate_key /etc/openresty/tls/error.key;
}

hellpot config

[deception]
server_name = 'nginx'

[http]
bind_addr = '127.0.0.1'
bind_port = '8081'
real_ip_header = 'X-Real-IP'
uagent_string_blacklist = ['Cloudflare-Traffic-Manager']
unix_socket_path = '/var/run/hellpot'
unix_socket_permissions = '0666'
use_unix_socket = false

[http.router]
catchall = true
makerobots = true
paths = ['wp-login.php', 'wp-login']

[logger]
debug = true
directory = '/home/sander/.local/share/HellPot/logs'
nocolor = false
trace = false
use_date_filename = true

[performance]
max_workers = 256
restrict_concurrency = false

Notable URLs that return a 404 instead of HellPot:

• /_profiler/phpinfo
• .git/config
• /actuator/gateway/routes

The special character (_, .) is a hint but I'm not sure if this is something in HellPot or my nginx (config).

[yunginnanet]

Interesting, I'll look into this