Skip to content

Report false positives: f005.backblazeb2.com, ecsomag.hu, serverelite.hu #625

Description

@zachlagden

What domains are false positives?

f005.backblazeb2.com
ecsomag.hu
serverelite.hu

Why are they false positives?

I maintain a downstream Pi-hole list that consumes this blocklist, and these three came through as false positives. Details:

f005.backblazeb2.com — Backblaze B2 core infrastructure, not a user-owned bucket. It's the shared download / native-API host for the us-east-005 storage cluster:

  • Resolves into Backblaze Inc IP space (149.137.136.16, NetName BACKB-7).
  • GET /file/<bucket>/... returns Bucket with such name does not exist — the bucket is taken from the path, so one host fronts every tenant in the cluster.
  • GET /b2api/v3/... returns a valid native B2 API response.
  • Blocking it breaks B2 downloads/backups for all customers on that cluster. Individual abuse buckets have their own <bucket>.s3.us-east-005.backblazeb2.com hostnames, which are unaffected.

ecsomag.hu — "GLS eCsomag", GLS Hungary's official parcel-sending portal:

  • IP 82.141.140.12 → whois "GLS Hungary Kft." (NetName GLS, HU).
  • Authoritative nameservers ns1.gls-hungary.com / ns2.gls-hungary.com.
  • Registered 2015; live GLS-branded service.

serverelite.hu — ServerElite (operator MARAELITE Kft), an established Hungarian retailer of refurbished enterprise servers:

  • Domain registered 2017, Microsoft 365 business email, full company identity (Budapest address, Dell Gold Partner, ISO 9001/14001/27001), card payments, real OpenCart storefront.
  • Named by Financial Times / Statista among Europe's fastest-growing companies (2024).

Thanks for maintaining the list.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions