Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 190 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 191 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 194 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 195 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 197 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 198 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 202 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 203 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 7 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 8 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 11 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 12 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 14 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 15 rev 4848 2026-10-02
suricata ET CNC Feodo Tracker Reported CnC Server group 1 rev 8063 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 20 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 22 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 23 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 26 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 27 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 29 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 30 rev 4848 2026-10-02
suricata ET CNC Feodo Tracker Reported CnC Server group 2 rev 8063 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 34 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 36 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 37 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 40 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 41 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 43 rev 4848 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 44 rev 4848 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 65 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 66 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 68 rev 6395 2026-10-02
suricata ET TOR Known Tor Exit Node Traffic group 69 rev 6395 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 285 rev 112154 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 19 rev 1747 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 141 rev 112154 2026-10-02
suricata ET CINS Active Threat Intelligence Poor Reputation IP group 284 rev 112154 2026-10-02
suricata ET DROP Spamhaus DROP Listed Traffic Inbound group 55 rev 4848 2026-10-02
suricata ET Threatview.io High Confidence Cobalt Strike C2 IP group 18 rev 1747 2026-10-02