EDL sources

Every EDL Deployment is composed from these source types. Include a source to add its IPs; exclude it to guarantee its IPs never appear.

ELLIO Threat ListsManaged threat-IP feeds (MAX, RDP, 250K, 100K) curated from the ELLIO Deception Network.

Common Business ServicesCurated IP ranges for cloud providers, CDNs, ISPs, security services, SaaS, and crawlers.

My External IP ListsBring your own blocklist URLs (BYOIPB). ELLIO fetches, normalises, and merges them.

My IP RulesetsYour own per-IP rules with optional expiry, grouped into reusable allowlists and blocklists.

RECON BlocklistsPer-provider scanner IP lists - decide policy individually for Censys, Shodan, Shadowserver, and others.

How the four types interact when they overlap: Include / exclude logic.