<address id="bztp3"><nobr id="bztp3"></nobr></address>

      <sub id="bztp3"><listing id="bztp3"><menuitem id="bztp3"></menuitem></listing></sub>

        <form id="bztp3"></form>

        <address id="bztp3"></address>
        <sub id="bztp3"></sub>

          <form id="bztp3"></form>

              Linux安全運維之如何活用history命令

              作者分離本人多年豐厚的工作實戰經歷,以簡單、淺顯易懂方式講述了如何活用history命令

              Linux安全運維丨誰動了我的主機?活用History命令

              懸鏡linux運維

              Linux系統下可通過history命令查看用戶所有的歷史操作記錄,在安全應急響應中起著非常重要的作用,但在未進行附加配置情況下,history命令只能查看用戶歷史操作記錄,并不能區分用戶以及操作時間,不便于審計分析。

              當然,一些不好的操作習慣也可能通過命令歷史泄露敏感信息。

              下面我們來介紹如何讓history日志記錄更細化,更便于我們審計分析。

              1、命令歷史記錄中加時間

              默認情況下如下圖所示,沒有命令執行時間,不利于審計分析。

              Linux安全運維丨誰動了我的主機?活用History命令

              懸鏡linux運維

              通過設置export HISTTIMEFORMAT=’%F %T ‘,讓歷史記錄中帶上命令執行時間。

              注意”%T”和后面的”’”之間有空格,不然查看歷史記錄的時候,時間和命令之間沒有分割。

              要一勞永逸,這個配置可以寫在/etc/profile中,當然如果要對指定用戶做配置,這個配置可以寫在/home/$USER/.bash_profile中。

              本文將以/etc/profile為例進行演示。

              Linux安全運維丨誰動了我的主機?活用History命令

              懸鏡linux運維

              要使配置立即生效請執行source /etc/profile,我們再查看history記錄,可以看到記錄中帶上了命令執行時間。

              Linux安全運維丨誰動了我的主機?活用History命令

              懸鏡linux運維

              如果想要實現更細化的記錄,比如登陸過系統的用戶、IP地址、操作命令以及操作時間一一對應,可以通過在/etc/profile里面加入以下代碼實現

              export HISTTIMEFORMAT=”%F %Twho -u am i 2>/dev/null| awk ‘{print $NF}’|sed -e ‘s/[()]//g’

              whoami”,注意空格都是必須的。

              Linux安全運維丨誰動了我的主機?活用History命令

              懸鏡linux運維

              修改/etc/profile并加載后,history記錄如下,時間、IP、用戶及執行的命令都一一對應。

              Linux安全運維丨誰動了我的主機?活用History命令

              懸鏡linux運維

              通過以上配置,我們基本上可以滿足日常的審計工作了,但了解系統的朋友應該很容易看出來,這種方法只是設置了環境變量,攻擊者unset掉這個環境變量,或者直接刪除命令歷史,對于安全應急來說,這無疑是一個災難。

              針對這樣的問題,我們應該如何應對,下面才是我們今天的重點,通過修改bash源碼,讓history記錄通過syslog發送到遠程logserver中,大大增加了攻擊者對history記錄完整性破壞的難度。

              2、修改bash源碼,支持syslog記錄

              首先下載bash源碼,可以從gnu.org下載,這里不做詳細說明了,系統需要安裝gcc等編譯環境。我們用bash4.4版本做演示。

              修改源碼:bashhist.c

              Linux安全運維丨誰動了我的主機?活用History命令

              懸鏡linux運維

              修改源碼config-top.h,取消/#define SYSLOG_HISTORY/這行的注釋

              Linux安全運維丨誰動了我的主機?活用History命令

              懸鏡linux運維

              編譯安裝,編譯過程不做詳細說明,本文中使用的編譯參數為: ./configure –prefix=/usr/local/bash,安裝成功后對應目錄如下:

              Linux安全運維丨誰動了我的主機?活用History命令

              懸鏡linux運維

              此時可以修改/etc/passwd中用戶shell環境,也可以用編譯好的文件直接替換原有的bash二進制文件,但最好對原文件做好備份。

              替換時要注意兩點:

              1、一定要給可執行權限,默認是有的,不過有時候下載到windows系統后,再上傳就沒有可執行權限了,這里一定要確定,不然你會后悔的;

              2、替換時原bash被占用,可以修改原用戶的bash環境后再進行替換。

              查看效果,我們發現history記錄已經寫到了/var/log/message中。

              Linux安全運維丨誰動了我的主機?活用History命令

              懸鏡linux運維

              如果要寫到遠程logserver,需要配置syslog服務,具體配置這里不做詳細講解,大家自己研究,發送到遠端logserver效果如下圖所示。

              Linux安全運維丨誰動了我的主機?活用History命令

              懸鏡linux運維

              經過以上操作,能夠有效保證history記載的完好性,防止攻擊者登錄系統后,經過取消環境變量、刪除history記載等方式抹掉操作行為,為平安審計、應急響應等提供了完好的原始數據。

               

              馬哥學習交流群

              馬哥教育-Linux學習-1群 485374463

              馬哥教育-Linux學習-2群 339184057

              ?

              相關新聞

              聯系我們

              400-080-6560

              在線咨詢:點擊這里給我發消息

              郵件:work@magedu.com

              工作時間:周一至周日,09:00-18:30

              QR code
              656彩票平台656彩票主页656彩票网站656彩票官网656彩票娱乐 www.2875z.com | www.ejylc16.com | x33g.vip | www.35wcp.com | www.boma0190.com | 00774xx.com | www.77ok.com | 3405fff.com | www.9155k.com | www.a0055.com | 7742k.com | www.56655n.com | 8381bb.com | www.3303.com | www.bwin1188.net | 3245v.com | www.35252d.com | 26668u.com | www.938537.com | www.782881.com | 3421.com | www.89894p.com | www.bet1622.com | 84498833.com | www.44118s.com | 3148.com | www.292199.com | www.6789wh.com | 2454888.com | www.9818o.cc | www.67845.com | yuhe.ooo | www.tctx2.com | www.seqhi.com | u72227.com | www.7239v.com | www.365109b.com | 3957x.com | www.293.com | www.40404688.com | bet99331.com | www.52303g.com | www.9068gg.com | 7605f.com | www.hg7800.com | www.033033m.com | ctxcp12.com | www.44118a.com | hcp4444.com | 28288ii.com | www.1011777.com | 256777t.com | 86687.com | www.975277.com | www.pj9087.com | dl2883.com | www.99677j.com | www.6403nn.com | 8722llll.com | www.865807.com | www.haomen1.com | www.97655b.com | www.25288t.com | 3379dd.com | www.371p.cc | www.bj448.com | 65786578.net | www.86267a.com | www.http://9978ll.com/ | cc1331.com | xpj04000.com | www.5522p.cc | www.600w.com | dd76669.com | x5816.com | www.50051p.com | www.4797.com | g2146.com | 12743.com | www.hg7226.com | www.788078.com | tt6832.com | www.550434.com | www.38138s.com | 20177770.com | www.07163n.com | www.242222.com | h72227.com | www.625477.com | www.38138g.com | 3424p.com | 33p88.cc | www.783709.com | www.7415oo.com | 80892nn.com | 1064g.com | www.hy5508.com | www.4078g.com | www.a1a222.cc | pt7008.com | www.602465.com | www.4521v.com | www.995h.net | 8883805.com | m8159.cc | www.5854k.cc | www.115203.com | www.5559xj.com | 7335o.com | www.568380.com | www.7240o.com | www.158msc.com | 00773zz.com | qijidianyou.com | www.5095i.com | www.16181c.com | www.vnsr600.com | 9068ss.com | cdwb.com | www.08588z.com | www.rd789.com | www.aicaiaa.com | 095.com | uc04.cc | www.65707p.com | www.swty566.com | www.tushan28.com | x3855.com | 6868pp.cc | www.596112.com | www.ylylc09.com | www.ra678.com | 33599aa.com | blm599.com | 4632299.com | www.926576.com | www.258908.com | www.392066.com | www.1869i.com | 82365j.com | 6363e.com | www.936570.com | www.3775b.com | www.ff811.com | www.20088hg.com | 3559a.com | 15a40.net | www.355294.com | www.00665a.com | www.0012737.com | www.9822msc.com | 22556p.com | yhbeijing.vip | www.7415d.com | www.4938x.com | 7499822.com | 4880i.com | 0747q.com | www.610659.com | www.91233r.com | www.00778b.com | www.948884.com | www.t32126.cc | 5443.com | 17797777.com | 4675j.com | 18438444.com | www.144428.com | www.676zf.com | www.h90928.com | www.98888js.com | www.9978qq.com | www.5551388.net | BY30832.com | 4465k.com | 69440066.com | 7777ag.com | www.150961.com | www.924570.com | www.96386m.com | www.38775rr.com | www.9299.cc | www.36607a.com | www.87680a.com | 27878kk.com | 88807q.com | pp4255.com | 30175544.com | 499965.com | ff555v.com | 875856b.com | www.50064u.com | www.596035.com | www.hr4888.com | www.bet73a.com | www.326213.com | www.578371.com | www.28000n.com | www.15425.com | www.9005b.com | www.33384066.com | www.hgw8638.com | www.2846k.com | www.682833.com | 054007.com | le888g.com | f08199.com | 11c53.com | 67888y.cc | 3807o.com | j444000.com | 69446666.com | 4647i.com | 2355xcom | 0209.com | 4508uu.com | 5.am | 67890h.com | 51133jj.com | 3967p.com | 6175pp.com | 5566hhgz.com | hhh5657.com | 3404r.cc | js3032.com | 66991468.com | 009900c.com | 5443z.com | 28758r.com | yh888f.com | vip66656.com | www.a1a000.cc | www.85770f.com | www.vns6n6.com | www.vns8891.com | www.hg2968.com | www.t8119.com | www.ylylc09.com | www.1030360.com | www.79095c.com | www.087y.com | www.xj445566.com | www.32123g.com | www.3933f.cc | www.810531.com | www.xpj1t1.com | www.6663009.com | manbetx168168.com | shtzjg.com | feicai0520.com | 1408d.com | 201855.com | ooo0022.com | mg7899.com | 2349012.com | 3121b.com | www.js98333.com | www.q8867.com | www.665345.com | www.aobo12345.com | www.7415pp.com | www.835993.com | www.506612.com | www.2632e.com | www.810601.com | www.lcw997.com | baizun456.com | 6137z.net | 0245i.com | 3559oo.com | r47479.com | www.hg00895.com | www.1230404.com | www.tc8802.com | www.32031a.com | www.97655q.com | www.981060.com | www.33598e.com | 7335m.com | 67890rrr.com | 31780000.com | www.01678cp.com | www.27363x.com | www.38775aa.com | www.75679.com | www.590801.com | 500000512.com | dyxjjjc.gov | mohan2013.com | 1294s.com | www.js778911.com | www.80969v.com | www.2111a.com | www.hcjt0.com | 80368vv.com | 52688c.com | 6118w.com | www.js30333.com | www.729696.com | www.u3410.com | www.33598x.com | www.224344.com | dh742.com | 51133p.com | www.4759ss.com | www.260666.com | www.2000c.cc | www.loll3.com | yh777.com | n2490.com | 509191.com | www.72477b.com | www.y8853.com | www.76gcw.com | 6002.com | 93922v.com | www.wns8858.com | www.0477msc.com | www.78885.com | www.810517.com | 3mgmmmm.com | a87570.com | www.567sbet.com | www.bet91487.com | www.8667i.com | 8957.com | 51335n.com | www.88807s.com | www.9900ra8.com | www.55clf.com | 7377sj.com | 22296beijin.com | www.00618z.com | www.5bet005.com | www.281877.com | tt5443.com | 899523.com | www.bd058.com | www.792071.com | www.920564.com | www.3116h.com | www.zcwf3.com | 77bet.com | 3189hd.com | www.681234.com | www.833369.com | 5309r.com | 2244buyu.com | www.10601.com | www.55717v.com | www.083552.com | p8159.cc | www.y6007.com | www.4809l.com | www.239838.com | 6112ii.com | www.58777c.com | www.bb888.cc | 19880t.com | d2490.com | www.79138.com | www.430188.com | 38345i.com | 2698j.com | www.3726.com | www.862455.com | 20053355.com | www.m22365.com | www.8905a.com | www.luck885.com | bet3650760.com | www.35849.com | www.50026c.com | 8159nn.cc | cp088w.com | www.j37.cc | www.348377.com | 4590a.com | www.665335.com | www.55228b.com | 4774b.com | www.hg444.tv | www.52062p.com | 6594kk.com | 3222h.cc | www.yh83.net | www.081306.com | 8547o.com | www.jy959.com | www.943893.com | 365bet2018.net | www.xpj7149.com | www.34788y.com | 82365k.com | www.g1018.com | www.91233z.com | 9484.com | www.uu0096.com | www.75538d.com | 3938ss.com | www.900673.com | www.50054t.com | 54141133.com | www.xhtd1985.com | www.3478o.cc | yun777.com | www.hg8265.com | www.xpj2278.com | www.16065n.com | 38989g.com | www.yl00222.com | www.66653h.com | 7508v.com | www.093779.com | www.hczx3.com | v4255.com | www.138cpq.com | www.500763.com | 444000n.com | www.80188d.com | bj6666.com | www.yh66607.com | www.5500ra8.com | a3665.com | www.45hg.com | www.c6882.com | 8790o.com | www.8882hj.com | 7893005.com | www.7720c.com | www.80075l.com | 4455634.com | www.tt1525.com | www.78700i.com | www.yh1088.com | www.939781.com | bh55654.com | www.56655a.com | www.127880.com | www.bmcp1344.com | www.66652c.com | 8538q.com | www.71071k.com | d7cc | www.5888868.com | www.770951.com | 857330.com | www.0343k.com | c89fhg3.com | www.11c668.com | 339649.com | www.xin777888.com | www.c4529.com | 30007s.com | www.50hd.cc | 65456.com | www.hg702.com | 66458d.com | www.53532.com | www.523745.com | b3644.com | www.66653.com | 009.so | www.55676q.com | 7380jj.com | www.57800e.com | 3544.am | www.776775.com | xxxx0128.com | www.pj2598.com | www.452803.com | www.63877z.com | www.ascp6.com | www.qmkl2.com | gc622.com | www.51331k.com | 80368e.com | www.352518.com | 3640.vip | www.562bbb.com | 5622i.com | www.n3410.com | 2459c.com | www.9997018.com | yh94877.com | www.xpj2070.com | 21379994.com | www.cai93.com | 1003822.com | www.296977.com | lhc907.com | www.qmc0022.com | 657.one | www.86999.com | 2477000.com | www.dzj0666.com | 11665003.com | www.45598u.com | 5622a.com | www.wns123e.com | 5536699.com | www.562bbb.com | 1104.net | www.95999w.com | 7989g.com | www.8839e.com | 63305c.com | www.799497.com | www.alpk99.com | www.156050.com | www.59044.com | bet2080.com | www.rgcp111.com | swin7.com | www.xyh6003.com | yh55444.com | www.50021i.com | 588fff.cc | www.911373.com | www.7830h.com | bet975.com | www.34311.com | 11018x.com | www.496408.com | shenlaoxi.com | www.60007b.com | 5060988.com | www.490680.com | www.666suncity.com | 1458m.com | www.38138b.com | swtyjjj.com | www.71233c.com | 88535f.com | www.316530.com | 3614r.com | www.1559507.com | douguo.com | www.9155e.com | www.vns9968.com | 44ee8331.com | www.00772s.com | hh8159.cc | www.9356j.com | www.07404.com | 67877e.com | www.4212t.com | u1915u.com | www.16878d.com | www.7610679.com | 3009h.com | www.1851115.com | 2757i.com | www.971291.com | www.3844a.com | 2096s.com | www.997287.com | 4630077.com | www.101372.com | www.5049e.com | 4556xl.com | 35zz.vip | www.9928ff.com | www.hgw0088.me | 9995z.cc | www.a94600.com | 5446hh.com | www.108095.com | www.4212u.com | 28288z.com | www.679313.com | www.yh558866.com | 3614j.com | www.qmkl2.com | www.34757.com | ggg5682.com | www.7793k.com | www.3467o.com | a8381.com | www.39500h.com | www.7111g.com | 875566.com | www.97655s.com | www.38778d.com | 33678ee.com | www.985479.com | www.67797q.com | 33318v.com | www.80767x.com | www.uu0096.com | 17795555.com | www.5091i.com | www.sancaishop.com | 477106.net | www.963220.com | www.wxc0234.com | 4052p.com | www.507433.com | www.7334i.com | 55818h.com | 6613699.com | www.97828y.vip | www.483828.com | 2455g.com | www.47370.cc | www.31441.com | hbs124.com | www.320477.com | www.009329.com | mgmvip688.com | man984.com | www.404577.com | www.32666v.com | 83138o.com | www.783090.com | www.5099kk.com | 55899w.com | 9498.com | www.50052g.com | www.110048.com | 8449dd.com | 6647q.com | www.30393.com | www.pj3390.com | 54140011.com | www.210883.com | www.140086.com | www.67797z.com | hwcpkjw.com | www.517844.com | www.w84e.com | www.87680k.com | 69442277.com | www.338071.com | www.44118e.com | www.282205.com | xxx40033.com | www.161570.com | www.m98478.com | www.js80088.com | 22204066.com | 65005d.com | www.77210k.com | www.3122e.com | feicai0594.com | 9339999l.com | www.669by.com | www.xn221.com | 37570i.com | www.5446w.com | www.76060t.com | 0500jc.com | www.347977.com | www.68365b.com | www.775412.com | bdg1100.com | www.708609.com | www.w84q.com | www.40033.1940033.com | pjheilongjiang.com | 99306p.com | www.067wy.com | www.3066tt.com | www.88837f.com | 2127zz.com | 61789v.com | www.ct6675.com | www.07679f.com | www.551324.com | 131ttt.net | p005.com | www.170882.com | www.50052hh.com | www.4212z.com | www.3459r.com | 20550349.com | 4508ww.com | www.504133.com | www.13434c.com | www.72msxfpta.com | www.yh7777.cc | 3967f.com | 61326699.com | www.813230.com | www.975796.com | www.55526l.com | www.gd68.com | 61324411.com | k4255.com | www.49956e.com | www.5484b.com | www.40339.com | www.pj5747.com | www.1869y.com | 3950t.com | 3379ff.com | www.317199.com | www.50026w.com | www.69989c.com | www.737770.com | www.hg1850.com | 20055511.com | 3679rr.com | hr1222.com | www.998349.com | www.093738.com | www.klcp009.com | www.dh87087.com | 9780055.com | 4018mm.com | bet893.com | 6647i.com | www.998632.com | www.pjzxyl.cn | www.1429g1.com | www.125767.com | www.76060u.com | feicai00886.com | kkk5657.com | 3238.com | dh08199.com | www.599046.com | www.66026.cc | www.398159.com | www.bwinyz45.com | www.le888w.com | www.09569q.com | 5855jj.com | 2146m.com | 77606v.com | 19991f.com | 3189zz.com | www.178385.com | www.986656.com | www.51515r.com | www.48330i.com | www.766169.com | www.58665y.com | www.779333.com | www.sbet567.net | 20041.com | 66299.com | 51133f.com | 4182j.com | 1624ff.com | 3379.com | 01885b.com | www.177074.com | www.650317.com | www.878zf.com | www.52072s.com | www.cp1518.com | www.18456.com | www.45598v.com | www.4963ss.com | www.z4042.com | www.61456.com | www.0636a.com | www.sb5203.com | www.653508.com | www.033033z.com | 923970.com | cc2205.com | 73055e.com | 8522oooo.com | 9659g.com | 3522a.cc | 3405ooo.com | 3304c.com | 97799m.com | 2306f.com | bbbb.AG | www.36787a.com | www.3170006.com | www.33js11.com | www.330099l.com | www.8694v.com | www.yinhecc77.com | www.v0040.com | www.76060c.com | www.3846a.me | www.pjliaoning.com | www.amh09.com | www.8124a.com | www.8124a.com | www.63877i.com | www.w32126.cc | www.1347-01.com | www.00829e.com | www.pj9799.com | www.06797x.com | www.hg061.com | www.83008j.com | www.4449.cc | www.35138.com | www.hg8145.com | www.hc9055.com | www.x948x.com | www.8967g.com | www.0077xpj.net | www.3066uu.com | www.vip9583.com | www.6133.com | www.hg864.com | www.7239b.com | www.15355n.com | www.yi654.com | www.810525.com | www.452820.com | www.170792.com | 0033y.cc | 3356.com | 55545q.com | 66681j.com | longfa2.com | feicai0411.com | www.0686999.com | www.8694m.com | www.3775778.com | www.899111.com | www.4963vv.com | www.3032bb.com | www.5856876.com | www.76520x.com | www.qml4.com | www.436106.com | aydfwjc.com | 8577r.cc | qg303.com | ii8159.cc | 28481000.com | www.7669j.net | www.ee2229.com | www.999c31.com | www.p7764.com | www.7886263.com | www.23636f.com | www.840689.com | www.031566.com | 7141xx.com | 1331nn.com | hg21222.com | q2018q.com | 73999a.com | YL7999.com | 36407733.com | 2851h.com | www.32126i.net | www.354488.com | www.88166b.com | www.w63568.com | www.38381.cc | www.495358.com | 228888v.com | www.68568t.com | www.cp500.in | 7720w.com | 45637x.com | y73888.com | 88850nn.com | www.zjlygm.cn | www.98698t.com | www.0343w.com | www.2632c.com | www.187152.com | 4812q.com | 3405ooo.com | 33115jj.com | www.57799vv.com | www.o3065.com | www.81608z.com | www.c757.vip | 23800p.com | 7134433.com | 2381yy.com | www.2077w.com | www.hga22200.com | www.4923l.com | www.641277.com | 3726g.com | 36407799.com | www.kfa6.com | www.jin188.com | www.vns9998.me | www.ya066.com | hlw1177.com | 0638kkk.net | 23800g.com | www.1596d.com | www.2021p.com | www.66082.cc | 9958900.com | w08199.com | 500000349.com | www.js607.com | www.38775ee.com | www.lqc7.com | 2546u.com | 12121.company | www.yh111222.com | www.cp88168.xn | www.yh76vv.com | www.236844.com | 4107r.com | hcp999.com | www.pj5673.com | www.0088hgaa.com | www.915990.com | 3122bb.com | 998o.cc | www.05125b.com | www.3983116.com | www.2350z.com | 33775002.com | 32yxw.com | www.9679i.com | www.j32031.com | www.c229.com | 18438p.com | 883399.com | www.450880.com | www.984708.com | www.354918.com | 4637799.com | www.4123nn.com | www.hbao4.com | www.11025.cc | 4195z.com | 998b.cc | www.hg7861.com | www.37377n.com | www.040423.com | hjdzjgj.com | www.9992558.com | www.591069.com | www.891595.com | 36400033.com | www.3435x.com | www.l32939.com | www.hjin6.com | 8550500.com | 1654ww.com | www.6776cc.com | www.dfyk3.com | 8003.com | www.hg1020.com | www.5309678.com | www.959557.com | mi513.com | www.32126i.net | www.j3410.com | www.530877.com | 940.net | www.58777y.com | www.068633.com | 99bjlvip.com | 44112007.com | www.pj79777.com | www.60108j.com | fhyl.com | 1164.com | www.7366008.com | www.510830.com | 3566ss.com | www.8422.com | www.50788b.com | feicai0790.com | www.ylg0099.com | www.562351.com | www.303464.com | 9679z.com | www.090091.com | www.8039c.com | 50041.com | www.bet3650314.com | www.8017111.com | 6601234.com | 55hh8331.com | www.4972s.com | www.608520.com | 3656xx.com | www.110048.com | www.055r.cc | 7249d.com | www.7196x.com | www.68689d.com | blhvip666.com | www.308550.com | 2490r.com | www.11557.com | www.810513.com | 5219d.com | www.awwv.cc | www.605999aa.com | dh4515.com | www.0820.com | www.zc35.com | lh66x.com | www.557tk.com | www.c5987.com | 4289x.com | www.766649.com | www.936250.com | 3405jjj.com | www.jy738.com | www.610560.com | 8381006.com | www.7415aa.com | www.220892.com | 83377n.com | www.63606c.com | 258701.com | www.8n8.com | www.36589999.com | 91019n.net | www.33js11.com | www.500cd.com | 4955q.com | www.335217.com | www.210602.com | 87665a.com | www.75600v.com | 8betbet365.com | www.58777p.com | www.5095l.com | 8159f.cc | www.79500j.com | www.102386.com | 1665h.com | www.9422j.com | hfgszc580.com | www.1233789.com | www.852699.com | 50099t.com | www.590561.com | 910277.com | www.330099d.com | www.3478.cc | hbs124.com | www.4996fs.com | 4774r.com | www.xpj5t5.com | www.080wy.com | 118888u.com | www.1851118.com | 6616xsj.com | www.25288h.com | www.fcff4.com | bwin8h.com | www.pjc44.vip | 4477634.com | www.amdc0088.com | www.602434.com | 2677ggg.com | www.hg99976.com | 5360ll.com | www.90544.com | 28758w.com | www.25288h.com | www.866248.com | js44888.com | www.hg3006.com | swin9.com | www.9737kk.me | aa3336.com | www.xpj66989.com | www.236380.com | www.7777ag4.com | www.5854r.cc | 4647z.com | www.hg77720.com | 01234ggcom | www.4078o.com | 5787.cc | www.709msc.com | 22234066.com | www.yh7601.com | www.602917.com | www.9599677.net | www.202115.com |