mirror of
https://github.com/qbittorrent/qBittorrent.git
synced 2026-03-02 22:57:32 -05:00
qBittorrent leaking IP address even when connected to NordVPN (and Network Interface and Optional IP address binding set to VPN) #17022
Labels
No labels
Accessibility
AppImage
Bounty
Build system
CI
Can't reproduce
Code cleanup
Confirmed bug
Confirmed bug
Core
Crash
Data loss
Discussion
Docker
Documentation
Duplicate
Feature
Feature request
Feature request
Feature request
Filters
Flatpak
GUI
Has workaround
I2P
Invalid
Libtorrent
Look and feel
Meta
NSIS
Network
Not an issue
OS: *BSD
OS: Linux
OS: Windows
OS: macOS
PPA
Performance
Project management
Proxy/VPN
Qt bugs
Qt6 compat
RSS
Search engine
Security
Temp folder
Themes
Translations
Triggers
Waiting diagnosis
Waiting info
Waiting upstream
Waiting web implementation
Watched folders
WebAPI
WebUI
autoCloseOldIssue
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/qBittorrent#17022
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @neurozero on GitHub (Jul 15, 2025).
qBittorrent & operating system versions
qBittorrent: v5.1.0
OS: Windows 10
VPN: NordVPN
Router: Linksys Smart Wi-fi (wired connection)
What is the problem?
Settings:
CONNECTION
Peer connection protocol: TCP and uTP
Use UPnP / NAT-PMP port forwarding from my router: enabled (disabled gives the same issue)
Proxy Server Type: None
BITTORRENT
Enable DHT (decentralized network) to find more peers: disabled
Enable Peer Exchange (PeX) to find more peers: disabled
Enable Local Peer Discovery to find more peers: disabled
Encryption mode: Allow encryption
Enable anonymous mode: disabled (enabled doesn't change anything)
ADVANCED
Network interface: NordLynx
Optional IP address to bind to: 10.5.0.2 (NordLynx Tunnel Adapter IP)
At ipleak.net my IP address is shown as whatever NordVPN is assigning to me, however
When I use the Torrent Address detection on ipleak.net my real IP address is shown for the test torrent.
Occasionally it will show a different IP address when I change some settings, but more often than not it is just showing my real IP address.
I tried Transmission just to test the ipleak test torrent and it only sees my NordVPN IP address.
I've been trying to use NordVPN Proxy Server but it won't always connect (SOCKS5 proxy error, Message: "End of file").
I don't know what else to try at this point.
Steps to reproduce
No response
Additional context
No response
Log(s) & preferences file(s)
In the log:
7/15/2025 10:26 AM - Detected external IP. IP: "185.153.179.$$$" [Not my IP, NordVPN IP]
7/15/2025 10:19 AM - Successfully listening on IP. IP: "10.5.0.2". Port: "UDP/21249"
7/15/2025 10:19 AM - Successfully listening on IP. IP: "10.5.0.2". Port: "TCP/21249"
7/15/2025 10:19 AM - Successfully listening on IP. IP: "fe80::723e:7ca:789d:$$$$$$". Port: "UDP/21249"
7/15/2025 10:19 AM - Successfully listening on IP. IP: "fe80::723e:7ca:789d:$$$$$$". Port: "TCP/21249"
@neurozero commented on GitHub (Jul 16, 2025):
I updated the title. This seems to be specific to NordVPN. No issues with ProtonVPN or Private Internet Access.
@noelbautista91 commented on GitHub (Aug 9, 2025):
Confirming with NordVPN. I've also tried Anonymous mode on qbittorrent, it made no difference.
Interestingly both my real IP and NordVPN IP are exposed.
@Autori commented on GitHub (Aug 10, 2025):
Perhaps related #22834
I made a workaround for my issue using firewall, blocking outbound from qbittorrent app from LAN IP range. Some features aren't working because they don't use the binding ( see #22844 ).
@yeahmyusernameis32characterslong commented on GitHub (Aug 26, 2025):
This is going to be Nord or OS specific, so if your VPN is leaking your real IP, run your torrent app in Docker and route it through a separate VPN container. Spin up a VPN container like Gluetun using WireGuard, then make your torrent container use the VPN container network. That forces all traffic from the app through the tunnel and if the VPN drops the app loses internet, so no leaks and if the data wants to use another method to get out like you are experiencing, it can't. DNS goes through the VPN and you can enable port forwarding if your provider supports it. Keeps the rest of your system off the VPN (you can add other docker containers for other apps to go through the VPN container). If needed, I can show a simple compose setup to link them.