Common Business Services
Common Business Services (CBS) is ELLIO's curated atlas of IP ranges for major
cloud providers, CDNs, ISPs, security services, SaaS, and crawlers. Browse it
at platform.ellio.tech/dashboard/common-business-services.
You consume CBS the same way you consume Threat Lists: include the IP ranges to block them, exclude them to guarantee they're never blocked. Most deployments exclude the few CBS providers their stack depends on so that trusted infrastructure stays reachable through the EDL.
The six categories
CBS is hierarchical. Every entry rolls up into one of these six top-level categories:
| Category | Typical IPv4 / IPv6 size | Members |
|---|---|---|
| Cloud Providers | ~56K / ~20K | Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, Oracle Cloud, Tencent |
| Content Delivery Networks (CDNs) | ~1.2K / ~660 | AWS CDN Services, Microsoft Azure CDN Services, Fastly, Akamai, Cloudflare, Tencent |
| Internet Service Providers | ~210 / ~230 | Starlink |
| Security Services | ~700 / ~60 | Zscaler, DHS |
| Software as a Service (SaaS) | ~5.5K / ~1.4K | Microsoft 365 (M365), Google Workspace, Adobe, GitHub |
| Web Crawlers & Bots | ~2.7K / ~1.0K | Google, Bing, Apple, OpenAI, Seznam, Petal Search |
All counts are live in the platform - the numbers above are the steady-state order of magnitude.
How CBS data is sourced
Each CBS member entry is sourced from the provider's published IP range list. ELLIO updates these continuously, so when AWS adds a new region or Cloudflare publishes new edge IPs the change flows into CBS within a release window.
Common patterns
Make sure your CDN traffic isn't blocked
If you sit behind Cloudflare or Akamai, exclude CDNs → Cloudflare (or Akamai) so that CDN-originated traffic never matches your blocklist.
Allow Microsoft 365 or Google Workspace
If your tenants live on M365, exclude SaaS → Microsoft 365 (M365). Same for Google Workspace.
Block specific bot families
The Web Crawlers & Bots category lets you decide which crawlers reach you:
- Exclude Googlebot/Bing if you want to be indexed.
- Include OpenAI if you don't want ChatGPT browsing scraping you.
- Exclude DuckDuckGo Bot to keep DuckDuckGo's index fresh.
These are surgical decisions - the catalogue is granular per-provider, not "all bots".
Block known scanner CDN edges (rare)
Most production deployments do not block CDNs because legitimate user traffic flows through them. Only block a CDN if you've measured that the cost of blocking outweighs the cost of letting a small fraction of attacker traffic in.
Where CBS interacts with the rest of the EDL
CBS exclusions always win over Threat List inclusions. If a Cloudflare IP appears in MAX (rare but possible, e.g. via a Workers script), excluding Cloudflare CDN keeps that IP reachable.
For the precedence rules in detail, see Include / exclude logic.
Adding a CBS member
CBS is centrally managed by ELLIO. Need a provider that isn't listed? Submit a request via Support Center → Contact Support. Common requests (a major SaaS, a regional cloud) ship within a release window.