IP Blocking

Ultimate protection against active malicious IPs at the perimeter level.

The largest, most dynamic, and fully customizable IP blocklist.
Compatible with all next-gen firewalls.
Blocklist Management Platform.

Beyond traditional blocklists.

Fully automated. Real-time.

4x larger

Threat List MAX contains between 175,000 and 450,000 active malicious entities at any given period, leaving competition in the dust.

15x faster

While others proudly offer updates every hour or 15 minutes, ELLIO: Threat List MAX updates every single minute.

2x IP Rotation

ELLIO: Threat List MAX instantly reflects the latest threats, rotating over 10% of IP addresses daily and blocking only what's needed.

Equip your next-gen firewall with
a stronger, custom-made shield.

38M

of suspicious and malicious connections blocked by ELLIO on average over 30 days in an average SME.

80%

of detections in New Anti-Virus Blade are based on ELLIO: Threat List MAX data.

20%

of detections ELLIO blocks are from geo-blocked countries due to better GeoIP information.

Advanced IP blocking with
extra added benefits.

Seamless blocking of latest threats and unwanted traffic.

Prevent large-scale cyberattacks from reaching your network by automatically blocking traffic from malicious sources.

Hold off attackers before detections are available.

Block attackers immediately, giving security vendors and your team time to detect and patch new vulnerabilities before they reach your network.

Reduce your perimeter footprint to defend against attackers.

Filter out scanners, making your company invisible to tools like Censys and Shodan. Mask your network from scanning services which are used by attackers to find new targets.

Available in all formats.
Compatible with popular NGFWs.

palo alto logocheckpoint logocisco logofortinet logo.f5 logontop logo.pfsense logoopnsense logo
Missing support from your firewall vendor, or looking to build your own solution?
Feel free to reach out to us.

ELLIO: Threat List MAX at a glance

ELLIO: Threat List MAX

THREAT PROTECTION

Average Size

175,000 - 450,000 entities

Update Frequency

• Every minute
• Every 5 minutes
• Every 30 minutes

Automatic Updates

Checkmark

Protection against

Active malicious IPs, mass exploitation attempts, automated bots, account takeovers, spambots, proxy traffic, fake account creation, malicious Tor activity.
Blocking threats before detection are available.
Reduce risk of L7 DDoS attacks.

COMPATIBILITY

Palo Alto Networks

Checkmark

Fortinet

Checkmark

Check Point

Checkmark

Cisco

Checkmark

Sophos

Checkmark

F5

Checkmark

ntopng

Checkmark

pfSense

Checkmark

OPNSense

Checkmark
BLOCKLIST MANAGEMENT PLATFORM

Access to Blocklist Management Platform

Checkmark

Customize deployment to each perimeter

Checkmark

Manage multiple perimeters, blocklists and NGFWs

Checkmark

Add/remove IPs within all deployments

Checkmark

Add/remove specific categories

Checkmark

Lookup which rule is including/excluding IP address

Checkmark
MSSP/RESELLER FEATURES

Self-service web portal

Checkmark

Multi-tenancy

Checkmark
PRICING

Pricing model

Per corporate entity and use case

Billing

Annually

THREAT PROTECTION

Average Size

Tooltip questionmark.

175,000 - 400,000 entities

Update Frequency

  • Every minute
  • Every 5 minutes
  • Every 30 minutes

Tailored to network perimeter

Comprehensive coverage, no need for tailoring

COMPATIBILITY

ntopng

Tooltip questionmark.
Checkmark

Palo Alto Networks NGFW

Tooltip questionmark.

Check Point NGFW

Tooltip questionmark.
Checkmark
Tooltip questionmark.

Fortinet NGFW

Tooltip questionmark.
Checkmark
Tooltip questionmark.

Cisco NGFW

Tooltip questionmark.
Checkmark
Tooltip questionmark.

F5 NGFW

Tooltip questionmark.
Checkmark
Tooltip questionmark.

OPNSense

Tooltip questionmark.
Checkmark
Tooltip questionmark.

pfSense

Tooltip questionmark.
Checkmark
TARGET AUDIENCE

Suitable for backbone network appliances

Checkmark

Suitable for medium and large enterprises

Checkmark

Recommended for

• Medium and Large Enterprises
• ISPs
• Data Centers
• Government
• MSSPs

FEATURES

Self-service web portal

-

Multi-tenancy

-

PRICING

Pricing model

Per corporate entity and use case


Blocklist Management Platform

Blocklists as easy as 1... 2... 3...

Creating your very own blocklist using Blocklist Management Platform is as easy as 1... 2... 3...

  1. Select the NGFW and required update frequency
  2. Choose the foundation blocklist to use as the base of your deployment
  3. Use curated pre-defined categories to include them in your blocklist or exclude them from your blocklist
  4. Copy/paste your unique deployment link into your NGFW
  5. Enjoy your automated protection and focus on threats that require human focus

See how ELLIO maximizes your firewall protection

38.000.000

ELLIO: Threat List filtered out more than 38 million unwanted connections during 30 day period.

8.640

8.640 different threat lists were automatically downloaded by the customers' NGFW during 30 day period.

270.000

Each dynamic ELLIO: Threat List MAX contained on average over 270.000 IP addresses.

0

After activating ELLIO: Threat List MAX, the number of reported False Positives is zero.

3.000.000

ELLIO: Threat List ONE filtered out more than 3 million unwanted connections in 45 day period.

100.000

Over 100.000 different threat lists were automatically downloaded by the customers' fleet of NGFWs in just 45 days.

60.000

Each dynamic ELLIO: Threat List ONE contained on average over 60.000 rules.

800%

After activating ELLIO: Threat List ONE, the number of detections increased by more than 800% within the New Anti-Virus blade on Check Point.

15%

The overall traffic to the customers' network dropped by 15% after 2 months. This includes traffic from bots, spray-and-pray attackers and opportunistic exploitations attempts.

720

720 different 60-minte threat lists were automatically downloaded by the customers' firewall during 30 days.

75.000

Each dynamic ELLIO: Threat List ONE contained on average over 75.000 rules.

60 days

After activating ELLIO: Threat List ONE, customers' infrastructure disappeared from services like Shodan and Censys after 60 days.

Mass exploitation and recon:
Silent enemy to security teams.

Unique observations by ELLIO in 24h
loading...
Current threats in ELLIO: Threat List MAX
loading...
ELLIO: Threat List MAX age
loading...
Source: Live data from the ELLIO Deception Network.

Big thanks to our ELLIO User Community!

Over 15,000 users worldwide

trust ELLIO to keep them protected and informed.

Cybernoise Map

What our users say

Petr photo
“Thank you for providing such an efficient threat list for Fortinet. Averaging 350K detections weekly, results truly speak for themselves. I highly recommend it. Their weekly reports are short and useful. In short, it really works!”
Daniel
IT Infrastructure Engineer

Summer hot savings
you don’t want to miss.

Discover limited-time prices for Summer 2024.

Discover limited-time
prices for July 2024.

Check out Summer Offer

Ready to see ELLIO in action?