🌐 State IT Infrastructure — LEAKS Intel · Cuban gov hosts + URLs + IP subnets · linked to state mailboxes
STATE URLS
10,110
100% of all URLs
URL HITS (cumulative)
837,961
UNIQUE STATE HOSTS
7+
17 internal /24 subnets
STATE EMAILS
3,330
view all →
All gobcu_web (9266) xetid_web (529) internal_ip_app (315)
TOP STATE HOSTS — by URL hits
Host URLs Total hits Mailbox?
10.12.163.35 63 444,615 —
10.12.163.40 43 77,025 —
10.12.163.46 82 61,424 —
10.12.163.44 19 9,254 —
10.12.163.36 12 4,807 —
10.12.163.30 2 8 —
10.12.163.143 1 1 —
INTERNAL SUBNETS /24
10.12.163.0/24 597,134 hits
10.12.170.0/24 82 hits
10.12.29.0/24 68 hits
10.12.38.0/24 29 hits
10.12.35.0/24 17 hits
10.12.173.0/24 16 hits
10.12.167.0/24 11 hits
10.12.45.0/24 10 hits
10.12.46.0/24 8 hits
10.12.34.0/24 4 hits
10.12.171.0/24 2 hits
10.12.3.0/24 2 hits
10.12.47.0/24 2 hits
192.168.0.0/24 2 hits
10.12.161.0/24 1 hits
10.12.174.0/24 1 hits
192.168.223.0/24 1 hits
🔓 LEAKED INTERNAL HOSTS — 109 named in the regime's own leaked docs · 28 corroborated live
Internal hostMentionsCorroborationAppears in
xetid.cu 479 ✓ live-confirmed Propuesta Oferta de productos y servicios de la division SATD.pdf →
soporte.xutil.cu 67 ✓ live-confirmed WORD.doc →
www.xetid.cu 51 ✓ live-confirmed 0_SolicitudCertificaciónSegurmática_R1.docx →
dpjca.minjus.gob.cu 35 leak-only usuarios.docx →
dpjch.minjus.gob.cu 32 leak-only cerro.xlsx →
misarchivos.xetid.cu 26 ✓ live-confirmed leeme.txt →
www.xutil.cu 24 leak-only 649-N-Cv-20 Servicio de Diseño, Desarrollo, Prueba Experimental y Despliegue Tienda Virtual para la Empresa Mayorista de VC.doc →
ftp.xetid.cu 22 leak-only leeme.txt →
hlg.xetid.cu 20 leak-only Know How Servidor Ejabberd.pdf →
registro.hlg.xetid.cu 18 leak-only Know How Servidor SqStat.pdf →
soporte.xetid.cu 15 ✓ live-confirmed Acta de Resp. Mat. de ORESTES RODRIGUEZ LORENZO.pdf →
doc-dsp.xetid.cu 13 leak-only 2-Daniel E Perez Rojas.doc →
dpjhg.minjus.gob.cu 13 leak-only VV-v1.2.0.doc →
dgtic.hlg.xetid.cu 12 leak-only Know How Servidor Web Proxy Inverso.pdf →
doc-dge.xetid.cu 12 leak-only 17-Yoandy Cervela Sanchez.doc →
ns.hlg.xetid.cu 9 leak-only Know How Servidor de Nombres de Dominio.pdf →
ns1.hlg.xetid.cu 8 leak-only Know How Servidor de Nombres de Dominio.pdf →
tramites.xetid.cu 8 leak-only README.md →
dgtic-db.hlg.xetid.cu 7 leak-only Know How Aplicación Web DGTIC.pdf →
alfresco-egob.prod.xetid.cu 6 leak-only Informe del autocontrol de UHU_19-06-18.pdf →
distra.xetid.cu 6 leak-only hosts.txt →
internet-sp.xetid.cu 6 ✓ live-confirmed logins.csv →
chat.hlg.xetid.cu 4 leak-only Know How Servidor Ejabberd.pdf →
dfile-egob.prod.xetid.cu 4 ✓ live-confirmed leeme.txt →
ecocem-ssl.xetid.cu 4 leak-only public_site.sh______-###############.txt →
gespro-stpc.xetid.cu 4 leak-only 19-Yudelyn Reyes Navarro.doc →
portal-mindus.xutil.cu 4 leak-only hosts.txt →
xsgc-calidad.xetid.cu 4 leak-only 6-Riandrys Gongora Roman.doc →
calidad.xetid.cu 3 leak-only 2-Daniel E Perez Rojas.doc →
correo.hlg.xetid.cu 3 leak-only Know How Servidor Samba4.pdf →
cxs.xetid.cu 3 ✓ live-confirmed Pasos a seguir.txt.txt →
ejemplo.xetid.cu 3 leak-only Drupal.txt.txt →
intranet.xetid.cu 3 leak-only 15-Alberto M Kile Osoria.doc →
mail.hlg.xetid.cu 3 leak-only Know How Servidor de Nombres de Dominio.pdf →
proxy.hlg.xetid.cu 3 leak-only Know How Servidor SqStat.pdf →
root.hlg.xetid.cu 3 leak-only Know How Servidor de Nombres de Dominio.pdf →
servicios.xetid.cu 3 leak-only ACTA DE RESPONSABILIDADIVAN HERNANDEZ RAVELO.pdf →
www.minal.gob.cu 3 leak-only Proyecto Técnico para el desarrollo del Portal web del Ministerio de Industria Alimentaria (MINAL) .docx →
automat-calidad.xetid.cu 2 leak-only 6-Riandrys Gongora Roman.doc →
bienestar-juristas.prod.xetid.cu 2 leak-only hosts.txt →
TOP STATE IPs — by mentions
10.12.163.35 xetid_internal 106,868,950
10.12.163.46 xetid_internal 19,165,956
10.12.163.40 xetid_internal 18,318,056
10.12.163.44 xetid_internal 2,258,464
10.12.163.30 xetid_internal 2,050,210
10.12.163.27 xetid_internal 1,727,764
10.12.163.36 xetid_internal 1,179,374
10.12.163.212 xetid_internal 616,344
10.12.163.85 xetid_internal 397,232
10.12.163.23 xetid_internal 376,492
10.12.163.31 xetid_internal 360,754
10.12.163.29 xetid_internal 320,982
10.12.163.221 xetid_internal 279,746
10.12.163.25 xetid_internal 234,118
10.12.163.86 xetid_internal 212,402
10.12.163.28 xetid_internal 88,206
10.12.163.37 xetid_internal 73,932
10.12.163.118 xetid_internal 69,540
10.12.163.224 xetid_internal 54,290
10.12.163.16 xetid_internal 48,678
10.12.163.42 xetid_internal 26,352
10.12.163.225 xetid_internal 8,772
10.12.163.154 xetid_internal 7,138
10.12.163.4 xetid_internal 4,042
10.12.163.215 xetid_internal 3,612
TOP STATE /24 SUBNETS
10.12.163.0/24 xetid_internal 144 IPs · 154,777,378
10.12.45.0/24 xetid_internal 49 IPs · 29,677,284
10.12.46.0/24 xetid_internal 90 IPs · 26,695,376
10.12.24.0/24 xetid_internal 18 IPs · 3,853,834
10.12.44.0/24 xetid_internal 30 IPs · 2,059,386
10.12.40.0/24 xetid_internal 46 IPs · 1,229,680
200.55.173.0/24 cuban_external 2 IPs · 1,202,546
10.30.0.0/24 internal_rfc1918 13 IPs · 746,040
10.12.165.0/24 xetid_internal 41 IPs · 727,854
10.12.29.0/24 xetid_internal 90 IPs · 622,556
10.12.171.0/24 xetid_internal 2 IPs · 580,160
10.30.118.0/24 internal_rfc1918 12 IPs · 398,914
STATE DB / SSH INFRASTRUCTURE (metadata only — no credentials)
[postgres] Genesig.BD9.xetid:5432 · db=Genesig_2.0_guantanamo · u=ing
[other] Git.BD.xetid · db=git · u=zeolides
[winscp] 10.12.0.11 · u=root
[winscp] 10.12.151.30 · u=server
[winscp] 10.12.151.31 · u=server
[winscp] 10.12.151.32 · u=server
[winscp] 10.12.151.36 · u=server
[winscp] 10.12.151.47 · u=%EF%BB%BFpe%C3%B1a
[winscp] 10.12.151.67:9010 · u=administrador
[winscp] 10.12.151.67:9011 · u=adminxutil
[winscp] 10.12.151.67:9012 · u=administrador
[winscp] 10.12.151.67:9014 · u=administrador
[winscp] 10.12.151.67:9015 · u=adminxutil
[winscp] 10.12.151.67:9016 · u=adminxutil
[winscp] 10.12.170.117 · u=root
[winscp] 10.12.170.125 · u=root
[winscp] 10.12.170.136 · u=root
[winscp] 10.12.170.23 · u=root
[winscp] 10.12.170.70 · u=root
[winscp] 10.12.174.210 · u=root
[winscp] 10.30.0.20 · u=adminxutil
[winscp] 10.30.0.69:2202 · u=administrador
[winscp] 10.50.8.106 · u=root
[winscp] 10.50.8.109 · u=root
[winscp] 10.50.8.123 · u=root
[winscp] 10.50.8.124 · u=root
[winscp] 192.168.56.101 · u=root
[winscp] 192.168.56.101 · u=server
[winscp] 192.168.56.102 · u=server
[winscp] 192.168.56.104 · u=root
[login] certificados.xetid.cu · u=nairoviss
[login] distra-acinox.prod.xetid.cu · u=administrador
[login] distra-aseguramientocomercio.prod.xetid.cu · u=administrador
[login] distra-cementomariel.prod.xetid.cu · u=administrador
[login] distra-dipmariel.prod.xetid.cu · u=administrador
[login] distra-divep.prod.xetid.cu · u=administrador
[login] distra-sigerh.prod.xetid.cu · u=adelaida
[login] distra.encomil.co.cu · u=logistica1
[login] distra.soygraf.cu · u=confin2
[login] distra.suchel.co.cu · u=inv
[login] idp.ecmmariel.cu · u=kenier
[login] internet-cd.xetid.cu · u=ixabella
[login] internet-sp.xetid.cu · u=algo
[login] internet-sp.xetid.cu · u=algo
[login] internet-sp.xetid.cu · u=ixabella
[login] internet-sp.xetid.cu · u=ygonzaleza
[login] sp-gespro.prod.xetid.cu · u=algo
ATTACK-SURFACE / EXPOSURE MAP — Shodan InternetDB (public index, read-only)
1,683 checked · 365 indexed 70 with known CVEs Full detail →
MOST-EXPOSED STATE HOSTS (by CVE count)
No CVE-exposed hosts in this filter.
TOP EXPOSED PORTS
80 256 hosts
443 220 hosts
53 90 hosts
25 68 hosts
22 44 hosts
465 40 hosts
993 40 hosts
2087 40 hosts
2083 39 hosts
2086 37 hosts
2082 36 hosts
587 34 hosts
143 31 hosts
8443 29 hosts
FINGERPRINTED SOFTWARE
f5:nginx 86
apache:http_server 40
postfix:postfix 38
canonical:ubuntu_linux 35
openbsd:openssh:8.2p1 20
linux:linux_kernel 19
cloudflare:cloudflare 19
debian:debian_linux 16
getbootstrap:bootstrap 15
jquery:jquery 13
openresty:openresty:1.31.1.1 13
openresty:lua-nginx-module:1.31.1.1 11
Source: Shodan InternetDB — a public index of internet-facing services. Read-only; CubaIntel never connects to, scans, or exploits any host. Coverage is bounded and reflects what Shodan has indexed, not a complete survey.
HOSTS / DBs (raw_hosts.txt) · 7
⇩ CSV
10.12.163.35 xetid_internal ·444615
10.12.163.40 xetid_internal ·77025
10.12.163.46 xetid_internal ·61424
10.12.163.44 xetid_internal ·9254
10.12.163.36 xetid_internal ·4807
10.12.163.30 xetid_internal ·8
10.12.163.143 xetid_internal ·1
URLS — STATE-AFFILIATED
222 total
⇩ CSV
10.12.163.35/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · internal_ip_app · 256852 hits
10.12.163.35/logistica/inventario/entrada/entrada/index.php/apertura/gestapertura
http · internal_ip_app · 108792 hits
10.12.163.40/logistica/farmacia/farmacia/index.php/tarjetamedicamento/tarjetamedicamento
http · internal_ip_app · 32959 hits
10.12.163.46/logistica/facturacion/facturacion/factura/index.php/gestionarfactura/gestionarfactura
http · internal_ip_app · 26135 hits
10.12.163.40/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · internal_ip_app · 21081 hits
10.12.163.35/logistica/inventario/movimiento/index.php/transferenciainterna/transferenciainterna
http · internal_ip_app · 16283 hits
10.12.163.35/logistica/inventario/operaciones/index.php/calcularmaxmin/calcularmaxmin
http · internal_ip_app · 12465 hits
10.12.163.40/portal/index.php/portal/portal
http · internal_ip_app · 11453 hits
10.12.163.35/logistica/utiles/nomencladores/index.php/nomencladores/nomencladores
http · internal_ip_app · 11274 hits
10.12.163.35/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · internal_ip_app · 11189 hits
10.12.163.35/portal/index.php/portal/portal
http · internal_ip_app · 8739 hits
10.12.163.44/logistica/farmacia/farmacia/index.php/reenvase/reenvase
http · internal_ip_app · 6502 hits
10.12.163.46/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 5978 hits
10.12.163.46/logistica/facturacion/facturacion/factura/index.php/gestionarfactura/gestionarfactura
http · internal_ip_app · 5699 hits
10.12.163.46/portal/index.php/portal/portal
http · internal_ip_app · 4644 hits
10.12.163.35/portal/
http · internal_ip_app · 4379 hits
10.12.163.46/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · internal_ip_app · 3397 hits
10.12.163.35/logistica/inventario/entrada/entrada/index.php/recepcion/gestrecepcion
http · internal_ip_app · 3384 hits
10.12.163.36/logistica/inventario/operaciones/index.php/rotacionlote/rotacionlote
http · internal_ip_app · 3085 hits
10.12.163.40/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · internal_ip_app · 2641 hits
10.12.163.40/portal/
http · internal_ip_app · 2571 hits
10.12.163.35/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 1957 hits
10.12.163.40/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 1458 hits
10.12.163.40/logistica/utiles/nomencladores/index.php/nomencladores/nomencladores
http · internal_ip_app · 1389 hits
10.12.163.46/portal/index.php/portal/portal
http · internal_ip_app · 1382 hits
10.12.163.35/logistica/inventario/movimiento/index.php/ajuste/ajuste
http · internal_ip_app · 1371 hits
10.12.163.46/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · internal_ip_app · 1354 hits
10.12.163.46/contabilidad/contabilidad_financiera/comprobante_operaciones/index.php/registrodecomprobantes/registrodecomprobantes
http · internal_ip_app · 1239 hits
10.12.163.35/seguridad/index.php/configaccesos/configaccesos
http · internal_ip_app · 1190 hits
10.12.163.46/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 1160 hits
10.12.163.46/seguridad/index.php/configaccesos/configaccesos
http · internal_ip_app · 1134 hits
10.12.163.44/portal/index.php/portal/portal
http · internal_ip_app · 1113 hits
10.12.163.35/ServiceProvider/ACS/
http · internal_ip_app · 917 hits
10.12.163.46/configuracion/fecha/index.php/gestionarfecha/gestionarfecha
http · internal_ip_app · 858 hits
10.12.163.46/contabilidad/banco/configuracion/cuentabancaria/index.php/cuentabancaria/cuentabancaria
http · internal_ip_app · 780 hits
10.12.163.46/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · internal_ip_app · 713 hits
10.12.163.35/metadatos/estructura/index.php/estructura/gestionarEstructura
http · internal_ip_app · 617 hits
10.12.163.35/logistica/inventario/entrada/entrada/index.php/apertura/gestapertura
http · internal_ip_app · 570 hits
10.12.163.46/contabilidad/banco/instrumento/index.php/gestionarinstrumentobancario/gestionarinstrumentobancario
http · internal_ip_app · 561 hits
10.12.163.40/ServiceProvider/ACS/
http · internal_ip_app · 547 hits
10.12.163.46/configuracion/modeloscontabilizacion/gestoperaciones/index.php/gestoperaciones/gestoperaciones
http · internal_ip_app · 521 hits
10.12.163.46/portal/
http · internal_ip_app · 506 hits
10.12.163.46/configuracion/subsistemas/index.php/gestsubsistemas/gestsubsistemas
http · internal_ip_app · 498 hits
10.12.163.36/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 493 hits
10.12.163.35/configuracion/nomgenerales/index.php/nomencladoresgenerales/nomencladoresgenerales
http · internal_ip_app · 481 hits
10.12.163.46/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 462 hits
10.12.163.40/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · internal_ip_app · 407 hits
10.12.163.36/portal/index.php/portal/portal
http · internal_ip_app · 404 hits
10.12.163.35/logistica/facturacion/puntoventa/index.php/configuracionpuntoventa/configuracionpuntoventa
http · internal_ip_app · 399 hits
10.12.163.35/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 377 hits
1 / 5 Next →