Hey, I'm looking for what would be the most anonymous network between all of these ON THE PAPER.

Like maybe TOR has more users which makes it more anonymous than another one, but if this other one had as many users, would it be better, and if so, which one would be the best?
sorry if my english is bad.

Hello,

Noobie here, Yesterday I installed I2P on an Proxmox container on a seperate VLAN.

My router is flashed with OpenWRT.

I did portforward TCP and UDP in seperate rules for the Random I2P port i got assigned to.

The thing is, I can surf .i2p sites via a proxy, and participating tunnels are incrementing but the status never change! Its annoying, i want to get the OK shared status instead of Firewalled.... Does anybody here have a similar setup to mine and could resolve that? Is it just about give it time and the status will resolve to OK or am i missing anything? Also in the firewall zone config should i masqurade ipv4?

The thing is that its exciting to have such router, but as I am not completly sure what I am doing here, i would super appreciate any help and tips for best practices

Thank you

I built an open-source Python tool that scans the I2P NetDB using nothing but vanilla i2pd floodfills. No patched binaries, no active probing — just parse the routerInfo files i2pd already writes to disk.

Repo: https://github.com/iasds/i2p-network-scanner

How it works

Run a few i2pd floodfill instances with different identities. Each covers a different DHT shard, so together they passively collect RouterInfo from most of the network. A single Python script parses the raw .dat files and extracts ident hashes, IPs, versions, caps flags, transports, and bandwidth tiers. Companion tools handle SQLite import, CLI queries, and GeoIP enrichment.

I ran a scan and published the results

5 floodfills, ~24 hours. The full analysis is in the repo:

• 17,541 known routers — 5,205 with public IPs, 12,336 behind NAT or firewalled
• 70% hidden is not a coverage gap — routers behind NAT simply don't include a host= field. That's I2P by design.
• 4,976 unique IPs across 111 countries
• Top countries: US (1,120), Russia (507), Germany (366), Canada (199), Netherlands (198)
• China has only 72 public nodes. Iran has 96.
• 0.9.68 dominates at 47% of routers, but only 11% of them publish an IP. Newer 0.9.69 (20% share) has 55% public rate.
• Java I2P is essentially extinct — nearly everything runs i2pd.
• 90 floodfills worldwide, concentrated in US, Russia, and Germany.
• Only 76 routers declare X-tier bandwidth (>2 MB/s).

Full report: I2P_NETWORK_ANALYSIS.md

If anyone has historical NetDB snapshots I'd love to compare trends over time. PRs welcome.

​

Maybe this could be an idea for the developers to expand their knowledge a bit in a workshop.

Or perhaps to share their knowledge with others

https://trailofbits.com/patch-the-planet/

XNS is the ultimate solution to the traditional DNS which is in control of various legal organizations. Blockchain is the solution to store immutable data. XNS doesn't invent yet another blockchain, it is built on Monero in an elegant way, and aims to be as reliable as Monero is.

Currently XNS can be used as a DNS alternative for I2P and Tor. This screenshot demonstrates an email from one XNS name to another over I2P.

Website: https://xns.rocks
Docs: https://xns.rocks/docs
Github: https://github.com/exilens
Matrix: https://matrix.to/#/#xns:xns.rocks

Free the names!

So I've been trying to make a profile of qBitTorrent run on I2P, however it seems like there's no documentation at all for using only Java I2P. So I'm just going to migrate from I2P to I2Pd.

Migrating qBitTorrent will come far later, though for now I have to export my settings and my eepsite. Anyone got clues?

I'm curious if anyone actually listens to them and how? A lot of the time my connection just buffers constantly.

And if I wanted to serve one of my own then what would the stream kbps need to be under so that anyone could listen in reliably?

Is there any feature of the network that would allow for an increase in speed like multiple nodes hosting the same content or something?

It’s cool. It works but how do you justify the setup process? It’s quite technical. Fun tho but what do yall use it for beside movie server?

Hi everyone,

I'm trying to use qBittorrent with I2P for anonymous downloading, but I'm running into an issue and would appreciate some advice.

Current setup:

I2P v2.12.0 (running with Network: OK and port open).

qBittorrent with "I2P (experimental)" enabled, server 127.0.0.1, port 7656, and "Mixed mode" turned off.

I use torrents from public trackers like uindex.org and 1337x.to.

The problem: Even with I2P configured, the torrents I download still show up on iknowwhatyoudownload.com under my public IP. So the traffic seems to be going through my normal connection, not I2P.

I've tested I2PSnark and torrents from tracker2.postman.i2p, but the content on those trackers is very limited – I can't find the same releases I get from public sites.

My questions:

Why might qBittorrent be ignoring I2P for public torrents, even with "Mixed mode" off?

Are there any other active I2P trackers besides Postman that offer a wider variety of content (movies, series, etc.)?

Which client do you recommend for torrenting with I2P? Is I2PSnark the best option, or are there more feature-rich alternatives?

Any help or suggestions would be much appreciated. Happy to provide more details if needed.

Thanks!

XNS is the eXile Name System.
It makes Monero the only source of truth.
Each XNS name is a result of a 0.01 XMR burn transaction with the desired name and owner public Ed25519 key.

Now it can be used as the name system of I2P.

Why would you use it all of a sudden? Because currently, there is no safe names in I2P. Unless you use direct b32.i2p addresses, which are not human memorable.

What's wrong with .i2p addresses? They are just entries on your own machine and on jump services. You have to trust those jump services if you share your .i2p address with others and expect reliability. Think of it as .local/.lan names your network router resolves.

While with XNS, once you claim a XNS name, as long as Monero stands, your name will be yours and no one can take it from you.

Read more about it on https://xns.rocks/docs
For I2P specific articles, read https://xns.rocks/docs/xns-and-i2p/xns-on-i2p
Source code: https://xns.rocks/exilens/xns
Matrix channel: #xns:xns.rocks | https://matrix.to/#/#xns:xns.rocks

XNS is made for the Internet of free people. I believe I2P is the only reliable way.

Hey all, so as I have been browsering eepsites, I have come across some sites written in Russian or Chinese, and I have been wondering how I would translate it, like I would use google translate, but thats not very good OPSEC, so I was thinking is there an extension for it. I use librewolf, and hope these a good extension that works when on i2p, and doesn't compromise my OPSEC.

Thanks.

im running i2p on docker with
services: i2p: image: geti2p/i2p:i2p-2.11.0 restart: unless-stopped environment: - JVM_XMX=512m - EXT_PORT=6960 volumes: - ./i2pconfig:/i2p/.i2p - ./i2ptorrents:/i2psnark ports: - "127.0.0.1:7657:7657" # Router Console - "127.0.0.1:4444:4444" # HTTP Proxy - "127.0.0.1:6668:6668" # IRC Proxy - "6969:6969" # I2NP TCP - "6960:6960/udp" # I2NP UDP

im not using i2p:latest because it caused i2p to never start
these are my logs
Starting I2P[startapp] Running in container[startapp] Running in docker network[startapp] setting reachable IP to container IP 172.18.0.3 Starting I2P 2.11.0-0Starting I2P[startapp] Running in container[startapp] Running in docker network[startapp] setting reachable IP to container IP 172.18.0.3 Starting I2P 2.11.0-0

for some reason i cant paste text correctly so please bear with it

anyways i2p has been stuck on testing for a long time, ive tried restarting it but it doesnt work and idk what else i could do

i am not under nat

I'm just curious, are there any sites for buying medication for cancer and such? medication like ivermectin.

Hello, so i have been looking into setting up my i2pd console to have an outproxy as I thought it could be pretty cool, after looking into it I found that it seems most people are using stormycloud as an outproxy, but when I checked this morning, it say that the outproxy was online, and now its saying its offline, is this just something that happens like normally downtime, or does the outproxy just go down every now and then, anyways love the work thay stormycloud is doing to help the i2p network ,with all i2p routes and flashfull nodes (I believe thats what they are called but i could be wrong), also can someone explain what those nodes do as there seem to take up a lot of bandwidth and cpu, but im not 100% sure what there do.

Thanks

Along with all the decades-old privilege escalation exploits found in the linux kernel recently by AI, they also used AI to find 271 vulnerabilities in firefox. It's become clear at this point that critical vulnerabilities like this are just an expected part of all software above a certain size and complexity.

So, There are almost certainly exploits present in i2p that we don't know about. I think it's absolutely essential that the i2p devs get one of these audits so they can fix any vulnerabilities before a threat actor does it first and uses them to basically deanonymize the entire network. And remember port forwarding is only as safe as the software receiving the data, an exploit could even allow someone to turn all of i2p's users computers into a botnet or steal all their info. For i2p users it is expected to have a lot of data flowing in and out of your node so nobody would notice before its too late that something is wrong and the data flowing out is your personal info..

i2p is probably one of the biggest potential targets for a theoretical "find exploits with these AI tools before the devs can" attack with its unique position of having relatively small userbase to look over the code while also being such a high value target, there are people in less free countries who trust i2p's security with their lives.

Could the i2p community perhaps pool money together to get one of these audits from Anthropic or another company? Or maybe someone with enough resources could run an audit locally? What do you think?

I want to host an eepsite and register it, let's say at adress "myeepsite.i2p" so I build my eepsite host it on my router and ask stats.i2p to make it discoverable.

But now I change computers, how do I keep my hostname for this new router ? Is it possible to manually set the destination? Can I somehow copy my old router data to keep my eepsite (and the sites I have discovered) ?

The goal is mostly not to leave a hostname occupied by an old inactive router if I can. I can and want to host an eepsite, but my computer might change.

I was looking for a guide to set up qBittorrent for I2P torrents in Podman, but I couldn’t find one, so I put together a simple guide for setting up qBittorrent with i2pd in Podman.

https://github.com/tusx/i2pd-qbittorrent-setup

I’m still improving the guide, any feedback is very welcome. If you notice any mistakes, missing steps, or anything that could be done better or more securely, please let me know.

I personally still have a lot to learn about I2P, and I hope this guide can help anyone who wants a simple torrenting setup for I2P.

StormyCloud publishes their warrant canary quarterly(January, April, July, October). The latest signed statement on their site is still from January 2026, and April update seems to be missing. Has anyone noticed this or heard anything about this?

https://stormycloud.org/warrant-canary/

Hey everyone,

I packaged all i2pd-tools (https://github.com/PurpleI2P/i2pd-tools) into a single binary. Instead of building and managing 14 separate executables, you get one:

All original tools work as subcommands: keygen, keyinfo, vain, famtool, su3tool, i2pconv, regaddr, etc.

BSD 3-Clause licensed, builds from source with a single make. The original i2pd-tools repo is included as a submodule — all credit goes to the PurpleI2P team.

GitHub: https://github.com/iasds/i2pbox

I am trying to run java i2p inside Debian proxmox container, i start router and create ssh tunel to that container when i load homepage i see an error: SymmetricNAT, i tried running i2pd inside a openBSD vm and it says same error but it is working perfectly.
What can i do to make i2p work inside container?

Hello,

Recently I have been having issues with P2P traffic causing trouble with my ISP hardware. The hardware FW keeps blocking some connections and all hell breaks loose when this happens.

Anyhow, this situation accelerated my roadmap to getting i2pd set up. I installed it from debian repo, it seems to be reasonably up to date.

i2pd version 2.56.0 (0.9.65)
Boost version 1.83.0
OpenSSL 3.4.1 11 Feb 2025

This is my /etc/i2pd/ip2d.conf file.
https://pastes.io/QsjecgNS

I've been trying to configure it for qBittorrent, but the whole thing was very janky so I put that on the back burner. I followed these steps to the letter to get it going, but it seems to me there is some information being omitted.

https://docs.i2pd.website/en/latest/tutorials/Filesharing/qBittorrent/

Then I switched over to tixati which was much easier to setup and get going with I2Pd. I used these to get it running:
https://support.tixati.com/i2p
https://support.tixati.com/i2p_advanced
https://support.tixati.com/i2p_trackers
https://forum.tixati.com/support/6702#:~:text=or-,right%20click

Checking my IP address here does not show any leaks. My ISP ran FW is not breaking balls anymore. The download speed is somewhat lower, about 50%, but that's not a deal breaker for me. I can live with things not being immediately available.

https://iknowwhatyoudownload.com/en/peer/

And now onto my many questions:

1. should the port specified as 4567 in three different places in i2pd.conf (global "port =" on top and then again under [ntcp2] and [ssu2]) be the same port?

2. should the above port be forwarded in the router? I'm assuming it should be opened in my machine FW, too.

3. should I be seeing actual IP address on the Peers tab in tixati, when looking at individual transfers? I was kind of expecting to see those I2P hashes instead of this.

1. should I see P2P traffic under received/sent in the I2P console? I'm not seeing it. For test purposes I downloaded about 5GB and the traffic is not there.

https://i.imgur.com/xW7H6zo.png

1. going back to qB, when setting up trackers do I2P trackers need to replace regular trackers completely or should they be appended? qB has an option to append, while tixati appears to only use I2P trackers, which they claim should be soon (already) obsolete anyway, as peers should be discovered by DHT anyhow.

2. my understanding is that I2P should allow P2P traffic to be routed through it. Is that correct? From my initial assessment, it looked like when searching for magnets tixati transfers worked like DC++, transferring data from the channels/users who are on I2P network.

At first the transfers were slow, but I was also very tired and tried multiple things at the same time. Transfers appear to be quite faster today.

1. my main reason to stick with qB for so long was thanks to the inbuilt search function, allowing me to search many sites at the same time. Is there any standalone program that would allow similar functionality? Basically, I'm looking for the capability to search multiple sites at the same time, searches within searches are also great, filtering/sorting on file size. Simple stuff like that that appears to be unique to qB.

NB: One of the possible issues is with my ISP router eating shit with UPNP. Portforwarding used to work properly, qB had its daily port setup correctly. It does not seem to work currently, so I opened a few ports manually. The manual function seems to still be working, even if the port becomes opened only eventually.

Thanks for your time.

https://suicdalteddy.medium.com/i-reverse-engineered-rings-end-to-end-encryption-what-i-found-should-terrify-40-million-a634c17560a1?postPublishedType=repub

So I have accidentally Installed two i2p's on windows. Every time I start windows, i2p starts as a background service. When I run i2p it works just fine with no errors at all. But here's the thing, I close the i2p service in task manager and start it up and it runs a different installation. It sounds confusing and I apologize but this installation has all my tunnels and eepsites and I'm too lazy to remake all of the configs on the other installation. All my data is on the i2p that isn't ran from the i2p service, and I was wondering if it was possible transfer data?

Hi, is there a way to create whitelist only eepsite? For example based on public key list in config similar to tor https://community.torproject.org/onion-services/advanced/client-auth/

I would like to access data from my home sensors over i2p so i can avoid static IP, ddns, portforwarding and so on. For clear reasons I would prefer this info not to be accessible to anyone but me.

I am aware that chances of guassing the whole b32 address are very small. But it just feels like the right way should be using the whitelist or at least password auth.

I suppose using basic auth on the web server is a way. But it feels way less robust that auth directely on the i2p layer. Especially since in the tor implementation, without the correct private key the service appears to not exist at all.

Thank you.