Thank you for raising a issue to us so promptly. Please make sure you have given us as much context as possible.

We will try and get back to you as soon as possible.

from teler.

from teler.

It looks like you are using a log_format that doesn't belong to Apache2. See Configuration, @Anggi17.

from teler.

well, just now I've changed the log format to apache but nothing changes, it still displays analyzing

from teler.

Show me your 1-line of your access.log (with redacted sensitive infos, if any) & your current teler configuration here.

from teler.

access.log

::1 - - [02/Dec/2020:19:47:15 -0800] "GET / HTTP/1.1" 200 249 "http://localhost:80" "sqlmap/1.4.7#stable (http://sqlmap.org)') AND 3888=6037 AND ('cyCX' LIKE 'cyCX"

config teler.yaml

To write log format, see https://github.com/kitabisa/teler#configuration

log_format: |
$remote_addr - $remote_user [$time_local] "$request_method $request_uri $request_protocol" $status $body_bytes_sent

rules:
cache: true
threat:
excludes:
- "Common Web Attack"
- "CVE"
- "Bad IP Address"
- "Bad Referrer"
- "Bad Crawler"
- "Directory Bruteforce"

# It can be user-agent, request path, HTTP referrer, IP address and/or request query values parsed in regExp
whitelists:
  # - "(curl|Go-http-client|okhttp)/*"
  # - "^/wp-login\\.php"
  # - "https://www\\.facebook\\.com"
  # - "192\\.168\\.0\\.1"

prometheus:

active: false

host: "localhost"

port: 9099

endpoint: "/metrics"

alert:
active: false
provider: "slack"

notifications:
slack:
token: "vyk2uIi1Du419ac6ImwvnDNI"
color: "#ffd21a"
channel: "teler"

telegram:

token: "123456:ABC-DEF1234...-..."

chat_id: "-111000"

discord:

token: "NkWkawkawkawkawka.X0xo.n-kmZwA8aWAA"

color: "16312092"

channel: "700000000000000..."

from teler.

Example is just for example! If you still can't spot to match the log_format variables, it's yours @Anggi17:
::1 - - [02/Dec/2020:19:47:15 -0800] "GET / HTTP/1.1" 200 249 "http://localhost:80" "sqlmap/1.4.7#stable (http://sqlmap.org)') AND 3888=6037 AND ('cyCX' LIKE 'cyCX" equal to:

$remote_addr - $remote_user [$time_local] "$request_method $request_uri $request_protocol" $status $body_bytes_sent "$http_referer" "$http_user_agent"

from teler.