search

qbittorrent / qBittorrent

qBittorrent BitTorrent client
https://www.qbittorrent.org
Other
27.09k stars 3.9k forks source link

qBitorrent sending data to unknown server at launch? #13163

Closed chorong761 closed 2 years ago

chorong761 commented 4 years ago

qBittorrent version and Operating Systemt

4.2.5, Windows 10 2004

What is the problem

I'm currently using pfsense with pfblockerng and i've noticed that when I launch qbitorrent, there would be a connection blocked by pfblockerng. it says that the connection was coming from the pc i've launched it and the port matches the on set in qbitorrent. the destination of the traffic would be to:

D4B2873E.static.ziggozakelijk.nl (212.178.135.62:55089), Netherlands via UDP.

I wonder what is the purpose of that connection/traffic?

Steps to reproduce

Launch qBitorrent

Extra info(if any)

It doesn't happen on every launch, happens usually when you launch it after a few hours or rebooted pc

FranciscoPombal commented 4 years ago

Probably some peer or tracker.

Can you reproduce this with no torrents added?

Can you please provide a wireshark capture showing the details of that connection?

chorong761 commented 4 years ago

Probably some peer or tracker.

Can you reproduce this with no torrents added?

Can you please provide a wireshark capture showing the details of that connection?

It happens on all the computers that I have qBitorrent installed, none of them have any torrents added.

FranciscoPombal commented 4 years ago

@chorong761

It happens on all the computers that I have qBitorrent installed, none of them have any torrents added.

So this happens on a clean install even if you do absolutely nothing besides starting qBittorrent? I guess it could be the DHT or something like that then. Again, can you please provide a Wireshark capture of the traffic you're seeing?

beigexperience commented 4 years ago

Could it be the GEOIP/flags database?

FranciscoPombal commented 4 years ago

Could it be the GEOIP/flags database?

That file isn't downloaded via UDP.

It's probably a ping to a DHT bootstrap node or something like that.

@chorong761 Any new info about this? Without further information, this will closed. In all likelihood, it was a DHT-related connection.

Seeker2 commented 4 years ago

Even assuming it was a DHT-related connection...what if both DHT is disabled and anonymous mode is enabled?

...Does qBitTorrent still attempt to make the connection on starting the app?

FranciscoPombal commented 4 years ago

@Seeker2 no idea, I cannot reproduce this. Still waiting on more info from the OP. It is possible they are mistaken and this connection they're seeing is due to something else entirely.

wobblywob commented 3 years ago

I saw this issue in 2 qbittorrent instances. A docker install from linuxserver.io and a fresh install on windows v4.3.2. I've also found a post on reddit about this link . I'm guessing it has something to do with DHT. I've disabled DHT and the alerts stopped. Note: DHT is enabled by default in a fresh install, and I believe that's what OP saw.

FranciscoPombal commented 3 years ago

You are most likely observing pings to the DHT bootstrap node. There are some DHT bootstrap nodes out there, but qBittorrent uses the libtorrent default, which is at dht.libtorrent.org (port 25401).

thalieht commented 2 years ago

It's probably a ping to a DHT bootstrap node or something like that.

That's probably it.