u/Far_Cartographer_924

i2pbox v2.0.0 - Fixed several critical vulnerabilities.
▲ 18 r/i2p

i2pbox v2.0.0 - Fixed several critical vulnerabilities.

This version fixes five major issues with i2pbox, significantly improving reliability. I originally planned to rewrite it in Rust, but it's clear that some protocols would need to be reimplemented (the Rust version of the i2p router is still incomplete), which is risky. Therefore, I've decided to continue writing it in C++. Thanks to llm for his help. The code is open source, and issues and pull requests are welcome.

github.com
u/Far_Cartographer_924 — 11 days ago
▲ 9 r/i2p

Avoid using I2P outproxies whenever possible

Based on the recommendations of i2pd developers and my own understanding of the source code, i2p outproxies are insecure; the connections used to access the clearnet via an outproxy are fundamentally different from those used to access internal i2p services.

reddit.com
u/Far_Cartographer_924 — 18 days ago
▲ 12 r/i2p

i2pbox v1.0.3 Released: famtool Crash Fix and Release Verification Improvements

i2pbox is a lightweight command-line toolbox for working with I2P identities, destinations, RouterInfo files, router families, and related network utilities.

It combines common I2P maintenance tasks into a single portable binary, including key generation and inspection, Base64 destination conversion,address registration, router family signing and verification, vanity address generation, and offline key handling.

The project is intended for I2P users, router operators, and developers who need practical command-line tools without installing a large application stack.

Source code and releases:

https://github.com/iasds/i2pbox

reddit.com
u/Far_Cartographer_924 — 27 days ago
▲ 18 r/i2p

BlueI2P teaser: An i2pd-based router with a Java I2P-style control panel.

Current development progress / not indicative of final status

Hi everyone, I’m working on BlueI2P.

Java I2P is friendly for new users and has a complete web console, but it can feel slow and heavy. i2pd is fast, lightweight, and powerful, but its configuration can be harder for new users.

BlueI2P tries to bring these two worlds closer together: an i2pd-based I2P router with a new Java I2P-style web dashboard.

The goal is to make i2pd easier to configure, monitor, and use, while keeping the router lightweight and performant.

The dashboard includes router status, services, tunnels, peers, NetDB, logs, configuration pages, and safer management APIs.

It is still early, but I’ll share more as it becomes usable.

reddit.com
u/Far_Cartographer_924 — 2 months ago
▲ 95 r/i2p+2 crossposts

We scanned the I2P network and found a suspicious cluster of 58 Chinese routers — version-locked, floodfill-flagged, yet invisible

https://preview.redd.it/hednbwu891bh1.png?width=690&format=png&auto=webp&s=2f2f47654083dff87308c9fede07f5a1b966fbbb

Over June 29–July 1, 2026, I ran five i2pd floodfill instances from three vantage points (Poland, China Unicom ×2) and passively scanned the I2P DHT. Found 20,701 unique routers globally. Among them, 58 routers from mainland China stood out in ways that don't look random.

What makes this cluster unusual:

43× enrichment on version 0.9.66 — 79.3% of the CN cluster runs this exact version, vs. only 1.8% globally. A single version shouldn't dominate any organic router population this heavily.

Floodfill flags everywhere, zero participation — 27–36% declare floodfill capability (vs. 14–20% global baseline), yet none were ever observed functioning as floodfills by our instances. The flags are declared, not honored.

82.8% share a near-identical RouterCaps template (XfR/XRG pattern) — looks like copy-paste provisioning.

- 46.2% hosted on Alibaba Cloud (AS37963). No knownRouters entries, no family declarations, ongoing IP rotation.

Four routers are China-vantage-only — reachable from inside the GFW, but unreachable from Singapore and Tor exit nodes. TCP RST/timeout behavior consistent with selective path filtering. These nodes simply don't exist from outside China.

We're careful with language: we describe this as consistent with coordinated, template-based provisioning — not as attribution to any specific actor. We don't know who runs these, or why. But the data is the data.

Methodological note — we parse the binary RouterInfo at two distinct caps layers (AddressCaps per transport vs. global RouterCaps). Prior I2P measurement papers didn't disentangle this, and it matters when you're trying to distinguish what a router says it can do from what it actually does.

Preprint (open access): 10.5281/zenodo.21169969 (https://doi.org/10.5281/zenodo.21169969)

Scanner source (MIT): github.com/iasds/i2p-network-scanner

reddit.com
u/Far_Cartographer_924 — 2 months ago
▲ 14 r/i2p

[Collaboration] I2P censorship measurement study — seeking co-authors (non-profit)

Independent researcher working on an I2P censorship measurement paper (English). Have some preliminary findings and an analysis framework in place. Looking to go deeper before submitting to arXiv.

Seeking collaborators for:

- Longitudinal tracking — baseline data collected, need ongoing observation for trend analysis

- Node reverse engineering — behavioral patterns identified, want to confirm technical details

- Protocol verification — TCP-level results done, want to add deeper handshake validation

Non-profit project, no funding. Co-authorship (2nd/3rd) based on contribution.

Interested? Reach me via PGP-encrypted email with your GitHub profile and a brief intro:

iasds.github.io

PGP: 1A60 9235 A475 39DF 6C4C C09B 822A 6DA9 E3BD 0612

reddit.com
u/Far_Cartographer_924 — 2 months ago
▲ 40 r/i2p

i2p-network-scanner — passively map the entire I2P network

I built an open-source Python tool that scans the I2P NetDB using nothing but vanilla i2pd floodfills. No patched binaries, no active probing — just parse the routerInfo files i2pd already writes to disk.

Repo: https://github.com/iasds/i2p-network-scanner


How it works

Run a few i2pd floodfill instances with different identities. Each covers a different DHT shard, so together they passively collect RouterInfo from most of the network. A single Python script parses the raw .dat files and extracts ident hashes, IPs, versions, caps flags, transports, and bandwidth tiers. Companion tools handle SQLite import, CLI queries, and GeoIP enrichment.


I ran a scan and published the results

5 floodfills, ~24 hours. The full analysis is in the repo:

  • 17,541 known routers — 5,205 with public IPs, 12,336 behind NAT or firewalled
  • 70% hidden is not a coverage gap — routers behind NAT simply don't include a host= field. That's I2P by design.
  • 4,976 unique IPs across 111 countries
  • Top countries: US (1,120), Russia (507), Germany (366), Canada (199), Netherlands (198)
  • China has only 72 public nodes. Iran has 96.
  • 0.9.68 dominates at 47% of routers, but only 11% of them publish an IP. Newer 0.9.69 (20% share) has 55% public rate.
  • Java I2P is essentially extinct — nearly everything runs i2pd.
  • 90 floodfills worldwide, concentrated in US, Russia, and Germany.
  • Only 76 routers declare X-tier bandwidth (>2 MB/s).

Full report: I2P_NETWORK_ANALYSIS.md


If anyone has historical NetDB snapshots I'd love to compare trends over time. PRs welcome.

u/Far_Cartographer_924 — 2 months ago
▲ 17 r/i2p

i2pbox — all i2pd-tools in one binary

Hey everyone,

I packaged all i2pd-tools (https://github.com/PurpleI2P/i2pd-tools) into a single binary. Instead of building and managing 14 separate executables, you get one:

All original tools work as subcommands: keygen, keyinfo, vain, famtool, su3tool, i2pconv, regaddr, etc.

BSD 3-Clause licensed, builds from source with a single make. The original i2pd-tools repo is included as a submodule — all credit goes to the PurpleI2P team.

GitHub: https://github.com/iasds/i2pbox

reddit.com
u/Far_Cartographer_924 — 3 months ago