Local Api Metrics output has hundreds of lines!

crowdsec
1

Hello, this is what I get as an output of cscli metrics command on a production server:

:warning:

Local Api Metrics:
+--------------------------------------------------------------+------------------+--------+
|                            Route                             |      Method      |  Hits  |
+--------------------------------------------------------------+------------------+--------+
|                                                              | GET              | 2      |
| *                                                            | PRI              | 20     |
| /                                                            | GET              | 3642   |
| /                                                            | HEAD             | 10     |
| /                                                            | LRCDAV           | 1      |
| /                                                            | NESSUS           | 2      |
| /                                                            | OPTIONS          | 2      |
| /                                                            | POST             | 8      |
| /.bash_history                                               | GET              | 2      |

And the list continues and has a bunch of different paths and files in there with mostly GET mehtod, is that normal or should it raise any concerns?

Thank you.

2

If you exposed the LAPI port to the internet it is a http API so if any internet crawlers find the port they can fuzz it. We always recommend that you either firewall or reverse proxy with IP based restrictions.