PortSleuth — Port Scanner & Suspicious Service Notifier

🔍 PortSleuth is a lightweight Bash script designed to help Linux admins scan for open TCP ports and detect unexpected or suspicious services running on a system.

🚀 Features

• Scans all currently open TCP ports
• Compares against a customizable list of allowed/expected ports
• Logs all findings with timestamps
• Highlights any unknown or potentially rogue services
• Cleans up logs older than 7 days
• Can be scheduled to run daily via cron

📂 Output

Logs are saved to the logs/ directory:

👨‍💻 Use Case

Ideal for Linux administrators or DevOps engineers who want to enhance visibility over their systems’ open ports and service exposure.

🛠️ Customize Allowed Ports

Edit the script to include only the ports/services you expect to be running:

ALLOWED_PORTS=(22 80 443)