Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 232 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 244 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 13 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 247 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 240 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 149 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 38 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 133 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 8 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 45 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 251 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 117 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 148 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 66 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 3 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 249 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 37 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 262 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 135 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 23 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 6 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 125 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 44 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 245 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 248 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 19 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 116 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 147 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 146 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 61 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 65 rev 4848 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 3 rev 1747 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 2 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 59 rev 4848 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 250 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 4 rev 112154 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 4 rev 1747 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 265 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 54 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 41 rev 4848 2026-10-02