diff --git a/waf.db b/waf.db
new file mode 100644
index 0000000..3b3eac8
Binary files /dev/null and b/waf.db differ
diff --git a/waf.db-shm b/waf.db-shm
new file mode 100644
index 0000000..fe9ac28
Binary files /dev/null and b/waf.db-shm differ
diff --git a/waf.db-wal b/waf.db-wal
new file mode 100644
index 0000000..e69de29
diff --git a/waf3.py b/waf3.py
index 6c6d5cf..e8118e6 100644
--- a/waf3.py
+++ b/waf3.py
@@ -181,7 +181,9 @@ async def scan(log):
         url = splitted[6].strip()
         status = splitted[8].strip()
         date_position = splitted[3][1:]
-        host = log.parent.parent.basename()
+        # host = log.parent.parent.basename()
+        host = log.splitall()[1]
+        print(host)
         if ip not in whitelist_ips:
             for rule in checklist:
                 where = url