定期對服務器進行掃描，將危險端口有開放的服務器記錄日誌或通過郵件、微信告警出來
先定義服務器列表 iplist：
10.10.0.50
10.10.0.51
10.10.0.52
....
檢查端口過程如下：

#!/bin/bash

for i in `awk ‘{print $1}‘ iplist`;
do 
    if [[ $(nmap $i -p 22 |grep open|grep -v grep|wc -l) -eq 1 ]];then
        echo $i 22 is up.
    else
        echo $i 22 is down.
    fi;
done

for i in `awk
 
 ‘{print $1}‘ iplist`;
do 
    if [[ $(nmap $i -p 80 |grep open|grep -v grep|wc -l) -eq 1 ]];then
        echo $i 80 is up.
    else
        echo $i 80 is down.
    fi;
done

遠程服務器端口是否開放(審計)