Scan a list of IPs and subnets for open ports

evilscan-loop wraps the evilscan port scanner so it runs across a whole file of targets instead of one host at a time. Give it a list of IP addresses or subnets, set the ports you care about, and it connects to each combination over TCP and reports what answered. The loop wrapper is what makes it practical for a fleet of hosts rather than a single box.

Beyond a plain open or closed verdict, it can grab service banners, do reverse DNS lookups, and attach free MaxMind geoip data, so a scan resolves into a richer picture of each live service. Status filtering lets you keep only the open ports or also see timeouts, refusals, and unreachable results when you need the full story.

On Trickest, evilscan-loop is a Network node that takes a targets file and writes a folder and a file of results. Run it after subnet expansion or asset discovery to find listening services, then feed the open hosts into a prober or a vulnerability scanner downstream.