update one, and new cypex

Author: Paul Jung (Thanat0s)

lists/coalition-signals-intelligence-nt-scanning/list.json

@@ -50,6 +50,7 @@
     "137.184.70.56/32",
     "137.184.71.60/32",
     "137.184.75.250/32",
+    "138.197.172.81/32",
     "138.197.201.109/32",
     "138.197.213.152/32",
     "138.197.214.239/32",

lists/cypex-nt-scanning/list.json

@@ -0,0 +1,22 @@
+{
+  "description": "List containing IP's associated with the Cypex scanners. This scanner CIDR range is extracted from CIRCL Network Telescope analysis on 2025/12/10",
+  "list": [
+    "18.117.57.162/32",
+    "18.190.163.148/32",
+    "18.217.194.148/32",
+    "3.136.208.236/32",
+    "3.136.67.107/32",
+    "3.143.152.247/32",
+    "52.14.58.0/32"
+  ],
+  "matching_attributes": [
+    "ip-src",
+    "ip-dst",
+    "domain|ip",
+    "ip-dst|port",
+    "ip-src|port"
+  ],
+  "name": "Cypex IP Ranges Used for Scanning",
+  "type": "cidr",
+  "version": 25121020
+}