Identification of Public IP Address of HackBit Hacking Forum Site
By Threat Intelligence Unit
Executive Summary
- The dark web forum HackBit was identified as a platform discussing hacking tools and blockchain-related topics.
- A publicly accessible backend IP address associated with the site was identified through Oasis Security’s dark web infrastructure analysis service Arthur.
Site Analysis
HackBit was observed operating as a dark web–based hacking forum where users engaged in discussions related to cyber activities and emerging technologies.
The platform hosted a range of content categories, including:
- Hacking techniques
- Hacking tools
- Blockchain-related discussions
During the initial investigation, the HackBit onion domain was active and accessible. However, at the time of writing, the site is no longer reachable.
Access Information
- Onion Domain:
3btm2z2w5lizokcyq2t35jy3ubnkw3bnstifpghr2qmulmbertrmzyqd.onion
The site was accessible via the Tor network and did not require complex access procedures, indicating an open forum structure.
Figure 1. HackBit hacking forum site
Figure 2. Discussions related to cyber activities and emerging technologies
Platform Activity
The following activity metrics were observed:
- Total Posts: 62,466
- Registered Members: 352
Figure 3. HackBit forum statistics overview (62,466 posts)
Figure 4. Registered members (352 users)
The volume of posts relative to the number of users suggested active participation and repeated engagement by a core user base.
Infrastructure Analysis
Public IP Identification
Using Oasis Security’s dark web analysis service Arthur, backend infrastructure associated with HackBit was identified.
- Domain:
vm********.con**********.net - Public IP Address:
194.233.***.*** - Location: Singapore
- Hosting Provider: Contabo Asia
- ASN: AS141995
This indicated that the service relied on infrastructure that was partially exposed to the public internet, rather than being fully isolated within Tor.
Conclusion
HackBit was observed as an active dark web hacking forum focused on hacking tools and blockchain topics. The discovery of publicly accessible backend infrastructure indicated incomplete isolation between Tor-based services and the broader internet.