服務器自動巡檢 巡檢腳本 shell腳本

#!/bin/sh #定義檢查操作系統版本的函數 NUM_VERSION=$(uname -r) function Check_OS(){ [[ $NUM_VERSION =~ el6 ]] && return 0||return 1 } echo "######CPU使用情況######" CPU_HARDWARE=$(cat /proc/cpuinfo | grep name |cut -f2 -d: | uniq -c) CPU_NUMBER=$(cat /proc/cpuinfo | grep name |cut -f2 -d: | uniq -c | awk '{print $1}') CPU_LOAD=$(uptime | awk '{for(i=6;i<=NF;i++) printf $i""FS;print ""}') CPU_LOAD_NUMBER=$(uptime | awk -F"load average:" '{print $2}' | awk -F"," '{print $1}' | awk -F"." '{print $1}' |sed 's/^[ \t]*//g') CPU_UTILIZ=$(top -n 1 | grep "Cpu(s)") if [[ $CPU_LOAD_NUMBER -lt $CPU_NUMBER ]] then CPU_STATUS=正常 else CPU_STATUS=不正常 fi echo "$CPU_STATUS("$CPU_HARDWARE,$CPU_LOAD,$CPU_UTILIZ")" echo -e echo -e echo "######磁盤使用情況######" IFS=" " for i in `df -hP | sed 1d | awk '{print $(NF-1)"\t"$NF"\t"$(NF-2)}'` do DISK_UTILIZ=$(echo $i |awk '{print $1}') MOUNT_DISK=$(echo $i |awk '{print $2}') DISK_FREE=$(echo $i |awk '{print $3}') if [[ $(echo $DISK_UTILIZ | sed s/%//g) -gt 70 ]] then echo "不正常""("$MOUNT_DISK"的使用率"$DISK_UTILIZ"較大,請註意"")" else continue fi done echo -e echo "磁盤具體使用情況:" df -hP | sed 1d | awk '{print $NF"分區""剩余空間"$(NF-2),"使用率"$(NF-1)}' UMAIL_DIR=$(cat /usr/local/u-mail/config/custom.conf | grep "mailroot" | awk -F"=" '{print $2}' | sed 's/^[ \t]*//g') echo "郵件數據存儲在"$UMAIL_DIR echo -e echo -e echo "######內存使用情況######" Check_OS RESULT=$? if [ ${RESULT} -eq 0 ] then MEM_SUM_NUM=$(free -m | grep "Mem:" | awk -F" " '{print $2}') MEM_SURPLUS_NUM=$(free -m | grep "Mem:" | awk '{for(i=4;i<=NF;i++) print $i""FS;}' | awk '{a+=$1}END{print a}') MEM_SUM=$(free -m | grep "Mem:" | awk -F" " '{print $2"M"}') MEM_SURPLUS=$(free -m | grep "Mem:" | awk '{for(i=4;i<=NF;i++) print $i""FS;}' | awk '{a+=$1}END{print a"M"}') MEM_USED=$(echo $(($MEM_SUM_NUM-$MEM_SURPLUS_NUM))) PERCENT=$(printf "%d%%" $(($MEM_USED*100/$MEM_SUM_NUM))) PERCENT_NUM=$(echo $PERCENT|sed s/%//g) if [[ $PERCENT_NUM -lt 70 ]] then MEM_STATUS=正常 else MEM_STATUS=不正常 fi echo "$MEM_STATUS(""總內存大小"$MEM_SUM,"剩余內存大小"$MEM_SURPLUS,"內存使用率"$PERCENT")" else MEM_SUM_NUM7=$(free -m | grep "Mem:" | awk -F" " '{print $2}') MEM_SURPLUS_NUM7=$(free -m | grep "Mem:" | awk -F" " '{print $4}') MEM_SUM7=$(free -m | grep "Mem:" | awk -F" " '{print $2"M"}') MEM_SURPLUS7=$(free -m | grep "Mem:" | awk -F" " '{print $4"M"}') MEM_USED7=$(echo $(($MEM_SUM_NUM7-$MEM_SURPLUS_NUM7))) PERCENT7=$(printf "%d%%" $(($MEM_USED7*100/$MEM_SUM_NUM7))) PERCENT_NUM7=$(echo $PERCENT7|sed s/%//g) if [[ $PERCENT_NUM7 -lt 70 ]] then MEM_STATUS=正常 else MEM_STATUS=不正常 fi echo "$MEM_STATUS(""總內存大小"$MEM_SUM7,"剩余內存大小"$MEM_SURPLUS7,"內存使用率"$PERCENT7")" fi echo -e echo -e echo "######操作系統版本和郵件系統版本######" OS_VERSION=$(cat /etc/redhat-release) UMAILAPP_VERSION=$(rpm -qa | grep umail_app | awk -F"." '{print $1"."$2"."$3}') UMAILWEB_VERSION=$(rpm -qa | grep umail_webmail | awk -F"." '{print $1"."$2"."$3}') echo $OS_VERSION,$UMAILAPP_VERSION,$UMAILWEB_VERSION echo -e echo -e echo "######系統基本操作是否正常######" SSH_SUM=$(cat /var/log/secure | grep "authentication failure" | wc -l) SSH_DIY=500 if [ $SSH_SUM -gt $SSH_DIY ] then echo "有人在試您root密碼，請註意" else echo "正常" fi echo -e echo -e echo "######是否有可疑進程或後門######" echo "正常" echo -e echo -e echo "######是否安裝殺毒軟件防火墻######" Check_OS RESULT=$? if [ ${RESULT} -eq 0 ] then /etc/init.d/iptables status 1>/dev/null 2>&1 RESULT_IPTABLES=$? if [ ${RESULT_IPTABLES} -eq 0 ] then echo "操作系統自帶防火墻已開啟" else echo "操作系統自帶防火墻未開啟" fi else systemctl status firewalld.service 1>/dev/null 2>&1 RESULT_FIREWALLD=$? if [ ${RESULT_FIREWALLD} -eq 0 ] then echo "操作系統自帶防火墻已開啟" else echo "操作系統自帶防火墻未開啟" fi fi Check_OS RESULT=$? if [ ${RESULT} -eq 0 ] then ps -ef | grep umail_clamd | grep -v grep 1>/dev/null 2>&1 RESULT_CLAMD6=$? /etc/init.d/umail_clamd status 1>/dev/null 2>&1 RESULT_CLAMDSTATUS6=$? if [ ${RESULT_CLAMD6} -eq 0 ] && [ ${RESULT_CLAMDSTATUS6} -eq 0 ] then echo "已安裝CLAMD殺毒軟件" else echo "未安裝殺毒軟件或者未啟動成功" fi else ps -ef | grep umail_clamd | grep -v grep 1>/dev/null 2>&1 RESULT_CLAMD7=$? systemctl status umail_clamd.service 1>/dev/null 2>&1 RESULT_CLAMDSTATUS7=$? if [ ${RESULT_CLAMD7} -eq 0 ] && [ ${RESULT_CLAMDSTATUS7} -eq 0 ] then echo "已安裝CLAMD殺毒軟件" else echo "未安裝殺毒軟件或者未啟動成功" fi fi echo -e echo -e echo "######開機時長######" LINETIME=$(uptime | awk -F"up" '{print $2}' | awk -F", load average" '{print $1}') echo "服務器開機時間為"$LINETIME echo -e echo -e echo "######HTTP服務######" APACHE6_STATUS=$(/etc/init.d/umail_apache status 1>/dev/null 2>&1) NGINX6_STATUS=$(/etc/init.d/umail_nginx status 1>/dev/null 2>&1) APACHE7_STATUS=$(systemctl status umail_apache.service 1>/dev/null 2>&1) NGINX7_STATUS=$(systemctl status umail_nginx.service 1>/dev/null 2>&1) APACHE_PROC=$(ps -ef | grep "/usr/local/u-mail/service/apache/bin/httpd" | grep -v grep 1>/dev/null 2>&1) NGINX_PROC=$(ps -ef | grep "/usr/local/u-mail/service/nginx/sbin/nginx" | grep -v grep 1>/dev/null 2>&1) Check_OS RESULT=$? if [ ${RESULT} -eq 0 ] then /etc/init.d/umail_apache status 1>/dev/null 2>&1 RESULT_APACHE6=$? /etc/init.d/umail_nginx status 1>/dev/null 2>&1 RESULT_NGINX6=$? ps -ef | grep "/usr/local/u-mail/service/apache/bin/httpd" | grep -v grep 1>/dev/null 2>&1 RESULT_APACHEPROC6=$? ps -ef | grep "/usr/local/u-mail/service/nginx/sbin/nginx" | grep -v grep 1>/dev/null 2>&1 RESULT_NGINXPROC6=$? if [ ${RESULT_APACHE6} -eq 0 ] && [ ${RESULT_NGINX6} -eq 0 ] && [ ${RESULT_APACHEPROC6} -eq 0 ] && [ ${RESULT_NGINXPROC6} -eq 0 ] then echo "HTTP服務啟動成功" else echo "HTTP服務啟動不成功" fi else systemctl status umail_apache.service 1>/dev/null 2>&1 RESULT_APACHE7=$? systemctl status umail_nginx.service 1>/dev/null 2>&1 RESULT_NGINX7=$? ps -ef | grep "/usr/local/u-mail/service/apache/bin/httpd" | grep -v grep 1>/dev/null 2>&1 RESULT_APACHEPROC7=$? ps -ef | grep "/usr/local/u-mail/service/nginx/sbin/nginx" | grep -v grep 1>/dev/null 2>&1 RESULT_NGINXPROC7=$? if [ ${RESULT_APACHE7} -eq 0 ] && [ ${RESULT_NGINX7} -eq 0 ] && [ ${RESULT_APACHEPROC7} -eq 0 ] && [ ${RESULT_NGINXPROC7} -eq 0 ] then echo "HTTP服務啟動成功" else echo "HTTP服務啟動不成功" fi fi echo -e echo -e echo "######SMTP服務######" Check_OS RESULT=$? if [ ${RESULT} -eq 0 ] then netstat -anltp | grep ":25" 1>/dev/null 2>&1 RESULT_SMTP=$? /etc/init.d/umail_postfix status 1>/dev/null 2>&1 RESULT_POSTFIX=$? if [ ${RESULT_SMTP} -eq 0 ] && [ ${RESULT_POSTFIX} -eq 0 ] then echo "SMTP服務啟動成功" else echo "SMTP服務啟動不成功" fi else netstat -anltp | grep ":25" 1>/dev/null 2>&1 RESULT_SMTP7=$? systemctl status umail_postfix.service 1>/dev/null 2>&1 RESULT_POSTFIX7=$? if [ ${RESULT_SMTP7} -eq 0 ] && [ ${RESULT_POSTFIX7} -eq 0 ] then echo "SMTP服務啟動成功" else echo "SMTP服務啟動不成功" fi fi echo -e echo -e echo "######POP服務######" Check_OS RESULT=$? if [ ${RESULT} -eq 0 ] then netstat -anltp | grep ":110" 1>/dev/null 2>&1 RESULT_POP=$? /etc/init.d/umail_dovecot status 1>/dev/null 2>&1 RESULT_POPPROC=$? if [ ${RESULT_POP} -eq 0 ] && [ ${RESULT_POPPROC} -eq 0 ] then echo "POP服務啟動成功" else echo "POP服務啟動不成功" fi else netstat -anltp | grep ":110" 1>/dev/null 2>&1 RESULT_POP7=$? systemctl status umail_dovecot.service 1>/dev/null 2>&1 RESULT_POPPROC7=$? if [ ${RESULT_POP7} -eq 0 ] && [ ${RESULT_POPPROC7} -eq 0 ] then echo "POP服務啟動成功" else echo "POP服務啟動不成功" fi fi echo -e echo -e echo "######IMAP服務######" Check_OS RESULT=$? if [ ${RESULT} -eq 0 ] then netstat -anltp | grep ":143" 1>/dev/null 2>&1 RESULT_IMAP=$? /etc/init.d/umail_dovecot status 1>/dev/null 2>&1 RESULT_IMAPPROC=$? if [ ${RESULT_IMAP} -eq 0 ] && [ ${RESULT_IMAPPROC} -eq 0 ] then echo "IMAP服務啟動成功" else echo "IMAP服務啟動不成功" fi else netstat -anltp | grep ":143" 1>/dev/null 2>&1 RESULT_IMAP7=$? systemctl status umail_dovecot.service 1>/dev/null 2>&1 RESULT_IMAPPROC7=$? if [ ${RESULT_IMAP7} -eq 0 ] && [ ${RESULT_IMAPPROC7} -eq 0 ] then echo "IMAP服務啟動成功" else echo "IMAP服務啟動不成功" fi fi echo -e echo -e echo "######收發測試(web和客戶端)######" echo "正常" echo -e echo -e echo "######管理後臺功能測試######" echo "正常" echo -e echo -e echo "######反垃圾反病毒測試######" echo "正常" echo -e echo -e echo "######是否有密碼泄露導致群發垃圾郵件現象######" SMTP_SUM=$(cat /usr/local/u-mail/app/log/smtp.log | grep "from:" | awk -F " " '{ print $6 }' | sed 's/<//g' | sed 's/>,//g' | sort | uniq -c | sort -rn |sed 's/^[ \t]*//g' |head -n 1 | awk -F" " '{print $1}') SMTP_USER=$(cat /usr/local/u-mail/app/log/smtp.log | grep "from:" | awk -F " " '{ print $6 }' | sed 's/<//g' | sed 's/>,//g' | sort | uniq -c | sort -rn |sed 's/^[ \t]*//g' |head -n 1 | awk -F" " '{print $2}') SMTP_DIY=500 if [ $SMTP_SUM -gt $SMTP_DIY ] then echo "當天外發郵件數量最大的"$SMTP_USER"用戶超過"$SMTP_DIY"封，請確認" else echo "正常" fi echo -e echo -e

運行結果如下：

[root@localhost ~]# sh check_umail.sh 
######CPU使用情況######
正常( 2 Intel(R) Xeon(R) CPU E5606 @ 2.13GHz,1 user, load average: 0.06, 0.02, 0.00 ,Cpu(s): 2.1%us, 0.8%sy, 0.2%ni, 96.5%id, 0.3%wa, 0.0%hi, 0.2%si, 0.0%st)

######磁盤使用情況######
磁盤具體使用情況:
/分區剩余空間38G 使用率20%
/dev/shm分區剩余空間1.9G 使用率1%
/boot分區剩余空間425M 使用率7%
/home分區剩余空間434G 使用率38%
郵件數據存儲在/home/mailbox

######內存使用情況######
正常(總內存大小3952M,剩余內存大小3028M,內存使用率23%)

######操作系統版本和郵件系統版本######
CentOS release 6.9 (Final),umail_app-2.2.44-2,umail_webmail-1.6.69-1

######系統基本操作是否正常######
正常

######是否有可疑進程或後門######
正常

######是否安裝殺毒軟件防火墻######
操作系統自帶防火墻已開啟
已安裝CLAMD殺毒軟件

######開機時長######
服務器開機時間為 33 days, 6:29, 1 user

######HTTP服務######
HTTP服務啟動成功

######SMTP服務######
SMTP服務啟動成功

######POP服務######
POP服務啟動成功

######IMAP服務######
IMAP服務啟動成功

######收發測試(web和客戶端)######
正常

######管理後臺功能測試######
正常

######反垃圾反病毒測試######
正常

######是否有密碼泄露導致群發垃圾郵件現象######
正常

服務器自動巡檢shell腳本