Common Business Services
Common Business Services (CBS) is ELLIO’s curated atlas of IP ranges for major
cloud providers, CDNs, ISPs, security services, SaaS, and crawlers. Browse it
at platform.ellio.tech/dashboard/common-business-services.
You consume CBS the same way you consume Threat Lists: include the IP ranges to block them, exclude them to guarantee they’re never blocked. Most deployments exclude the few CBS providers their stack depends on so that trusted infrastructure stays reachable through the EDL.
The six categories
Section titled “The six categories”CBS is hierarchical. Every entry rolls up into one of these six top-level categories:
| Category | Typical IPv4 / IPv6 size | Members |
|---|---|---|
| Cloud Providers | ~56K / ~20K | Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, Oracle Cloud, Tencent |
| Content Delivery Networks (CDNs) | ~1.2K / ~660 | AWS CDN Services, Microsoft Azure CDN Services, Fastly, Akamai, Cloudflare, Tencent |
| Internet Service Providers | ~210 / ~230 | Starlink |
| Security Services | ~700 / ~60 | Zscaler, DHS |
| Software as a Service (SaaS) | ~5.5K / ~1.4K | Microsoft 365 (M365), Google Workspace, Adobe, GitHub |
| Web Crawlers & Bots | ~2.7K / ~1.0K | Google, Bing, Apple, OpenAI, Seznam, Petal Search |
All counts are live in the platform - the numbers above are the steady-state order of magnitude.
How CBS data is sourced
Section titled “How CBS data is sourced”Each CBS member entry is sourced from the provider’s published IP range list. ELLIO updates these continuously, so when AWS adds a new region or Cloudflare publishes new edge IPs the change flows into CBS within a release window.
Common patterns
Section titled “Common patterns”Make sure your CDN traffic isn’t blocked
Section titled “Make sure your CDN traffic isn’t blocked”If you sit behind Cloudflare or Akamai, exclude CDNs → Cloudflare (or Akamai) so that CDN-originated traffic never matches your blocklist.
Allow Microsoft 365 or Google Workspace
Section titled “Allow Microsoft 365 or Google Workspace”If your tenants live on M365, exclude SaaS → Microsoft 365 (M365). Same for Google Workspace.
Block specific bot families
Section titled “Block specific bot families”The Web Crawlers & Bots category lets you decide which crawlers reach you:
- Exclude Googlebot/Bing if you want to be indexed.
- Include OpenAI if you don’t want ChatGPT browsing scraping you.
- Exclude DuckDuckGo Bot to keep DuckDuckGo’s index fresh.
These are surgical decisions - the catalogue is granular per-provider, not “all bots”.
Block known scanner CDN edges (rare)
Section titled “Block known scanner CDN edges (rare)”Most production deployments do not block CDNs because legitimate user traffic flows through them. Only block a CDN if you’ve measured that the cost of blocking outweighs the cost of letting a small fraction of attacker traffic in.
Where CBS interacts with the rest of the EDL
Section titled “Where CBS interacts with the rest of the EDL”CBS exclusions always win over Threat List inclusions. If a Cloudflare IP appears in MAX (rare but possible, e.g. via a Workers script), excluding Cloudflare CDN keeps that IP reachable.
For the precedence rules in detail, see Include / exclude logic.
Adding a CBS member
Section titled “Adding a CBS member”CBS is centrally managed by ELLIO. Need a provider that isn’t listed? Submit a request via Support Center → Contact Support. Common requests (a major SaaS, a regional cloud) ship within a release window.