找到了一个端口扫描的Python小脚本，做个备份&学习：

#!/usr/bin/env python
# -*- coding: utf-8 -*-

import time, socket, thread

socket.setdefaulttimeout(3)

def port_scan(ip, port):
    try:
        if port>=65535:
            print 'Scanning port's range is 0-65535'
            port = 5000
        # create an AF_INET, STREAM socket (TCP)
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        scan_result = s.connect_ex((ip, port))
        if scan_result == 0:
            print ip, ":", port, "Port is open!"
        s.close()
    except:
        print "port-scan error-1"

def ip_scan(ipaddress):
    try:
        t = time.time()
        for item in range(0, 1000+1):
            #使用start_new_thread函数可以简单的启动一个线程
            #第一个参数指定线程中执行的函数，第二个参数为元组型的传递给指定函数的参数值
            thread.start_new_thread(port_scan, (ipaddress, int(item)))
            time.sleep(0.003)
        print 'Port-scan complete! Takes: %f seconds.'% (time.time()-t)
    except:
        print "port-scan error-2"

if __name__ == "__main__":
	ip_scan("127.0.0.1")
	ip_scan("192.168.1.1")

代码短小精悍，用的是底层的socket加上多线程，速度还是很快的。