🌐 State IT Infrastructure — LEAKS Intel · Cuban gov hosts + URLs + IP subnets · linked to state mailboxes
STATE URLS
10,110
100% of all URLs
URL HITS (cumulative)
837,961
UNIQUE STATE HOSTS
1+
17 internal /24 subnets
STATE EMAILS
3,330
view all →
All gobcu_web (9266) xetid_web (529) internal_ip_app (315)
TOP STATE HOSTS — by URL hits
Host URLs Total hits Mailbox?
10.12.163.35 63 444,615 —
INTERNAL SUBNETS /24
10.12.163.0/24 597,134 hits
10.12.170.0/24 82 hits
10.12.29.0/24 68 hits
10.12.38.0/24 29 hits
10.12.35.0/24 17 hits
10.12.173.0/24 16 hits
10.12.167.0/24 11 hits
10.12.45.0/24 10 hits
10.12.46.0/24 8 hits
10.12.34.0/24 4 hits
10.12.171.0/24 2 hits
10.12.3.0/24 2 hits
10.12.47.0/24 2 hits
192.168.0.0/24 2 hits
10.12.161.0/24 1 hits
10.12.174.0/24 1 hits
192.168.223.0/24 1 hits
🔓 LEAKED INTERNAL HOSTS — 109 named in the regime's own leaked docs · 28 corroborated live
Internal hostMentionsCorroborationAppears in
xetid.cu 479 ✓ live-confirmed Propuesta Oferta de productos y servicios de la division SATD.pdf →
soporte.xutil.cu 67 ✓ live-confirmed WORD.doc →
www.xetid.cu 51 ✓ live-confirmed 0_SolicitudCertificaciónSegurmática_R1.docx →
dpjca.minjus.gob.cu 35 leak-only usuarios.docx →
dpjch.minjus.gob.cu 32 leak-only cerro.xlsx →
misarchivos.xetid.cu 26 ✓ live-confirmed leeme.txt →
www.xutil.cu 24 leak-only 649-N-Cv-20 Servicio de Diseño, Desarrollo, Prueba Experimental y Despliegue Tienda Virtual para la Empresa Mayorista de VC.doc →
ftp.xetid.cu 22 leak-only leeme.txt →
hlg.xetid.cu 20 leak-only Know How Servidor Ejabberd.pdf →
registro.hlg.xetid.cu 18 leak-only Know How Servidor SqStat.pdf →
soporte.xetid.cu 15 ✓ live-confirmed Acta de Resp. Mat. de ORESTES RODRIGUEZ LORENZO.pdf →
doc-dsp.xetid.cu 13 leak-only 2-Daniel E Perez Rojas.doc →
dpjhg.minjus.gob.cu 13 leak-only VV-v1.2.0.doc →
dgtic.hlg.xetid.cu 12 leak-only Know How Servidor Web Proxy Inverso.pdf →
doc-dge.xetid.cu 12 leak-only 17-Yoandy Cervela Sanchez.doc →
ns.hlg.xetid.cu 9 leak-only Know How Servidor de Nombres de Dominio.pdf →
ns1.hlg.xetid.cu 8 leak-only Know How Servidor de Nombres de Dominio.pdf →
tramites.xetid.cu 8 leak-only README.md →
dgtic-db.hlg.xetid.cu 7 leak-only Know How Aplicación Web DGTIC.pdf →
alfresco-egob.prod.xetid.cu 6 leak-only Informe del autocontrol de UHU_19-06-18.pdf →
distra.xetid.cu 6 leak-only hosts.txt →
internet-sp.xetid.cu 6 ✓ live-confirmed logins.csv →
chat.hlg.xetid.cu 4 leak-only Know How Servidor Ejabberd.pdf →
dfile-egob.prod.xetid.cu 4 ✓ live-confirmed leeme.txt →
ecocem-ssl.xetid.cu 4 leak-only public_site.sh______-###############.txt →
gespro-stpc.xetid.cu 4 leak-only 19-Yudelyn Reyes Navarro.doc →
portal-mindus.xutil.cu 4 leak-only hosts.txt →
xsgc-calidad.xetid.cu 4 leak-only 6-Riandrys Gongora Roman.doc →
calidad.xetid.cu 3 leak-only 2-Daniel E Perez Rojas.doc →
correo.hlg.xetid.cu 3 leak-only Know How Servidor Samba4.pdf →
cxs.xetid.cu 3 ✓ live-confirmed Pasos a seguir.txt.txt →
ejemplo.xetid.cu 3 leak-only Drupal.txt.txt →
intranet.xetid.cu 3 leak-only 15-Alberto M Kile Osoria.doc →
mail.hlg.xetid.cu 3 leak-only Know How Servidor de Nombres de Dominio.pdf →
proxy.hlg.xetid.cu 3 leak-only Know How Servidor SqStat.pdf →
root.hlg.xetid.cu 3 leak-only Know How Servidor de Nombres de Dominio.pdf →
servicios.xetid.cu 3 leak-only ACTA DE RESPONSABILIDADIVAN HERNANDEZ RAVELO.pdf →
www.minal.gob.cu 3 leak-only Proyecto Técnico para el desarrollo del Portal web del Ministerio de Industria Alimentaria (MINAL) .docx →
automat-calidad.xetid.cu 2 leak-only 6-Riandrys Gongora Roman.doc →
bienestar-juristas.prod.xetid.cu 2 leak-only hosts.txt →
TOP STATE IPs — by mentions
10.12.163.35 xetid_internal 106,868,950
TOP STATE /24 SUBNETS
10.12.163.0/24 xetid_internal 144 IPs · 154,777,378
10.12.45.0/24 xetid_internal 49 IPs · 29,677,284
10.12.46.0/24 xetid_internal 90 IPs · 26,695,376
10.12.24.0/24 xetid_internal 18 IPs · 3,853,834
10.12.44.0/24 xetid_internal 30 IPs · 2,059,386
10.12.40.0/24 xetid_internal 46 IPs · 1,229,680
200.55.173.0/24 cuban_external 2 IPs · 1,202,546
10.30.0.0/24 internal_rfc1918 13 IPs · 746,040
10.12.165.0/24 xetid_internal 41 IPs · 727,854
10.12.29.0/24 xetid_internal 90 IPs · 622,556
10.12.171.0/24 xetid_internal 2 IPs · 580,160
10.30.118.0/24 internal_rfc1918 12 IPs · 398,914
STATE DB / SSH INFRASTRUCTURE (metadata only — no credentials)
[postgres] Genesig.BD9.xetid:5432 · db=Genesig_2.0_guantanamo · u=ing
[other] Git.BD.xetid · db=git · u=zeolides
[winscp] 10.12.0.11 · u=root
[winscp] 10.12.151.30 · u=server
[winscp] 10.12.151.31 · u=server
[winscp] 10.12.151.32 · u=server
[winscp] 10.12.151.36 · u=server
[winscp] 10.12.151.47 · u=%EF%BB%BFpe%C3%B1a
[winscp] 10.12.151.67:9010 · u=administrador
[winscp] 10.12.151.67:9011 · u=adminxutil
[winscp] 10.12.151.67:9012 · u=administrador
[winscp] 10.12.151.67:9014 · u=administrador
[winscp] 10.12.151.67:9015 · u=adminxutil
[winscp] 10.12.151.67:9016 · u=adminxutil
[winscp] 10.12.170.117 · u=root
[winscp] 10.12.170.125 · u=root
[winscp] 10.12.170.136 · u=root
[winscp] 10.12.170.23 · u=root
[winscp] 10.12.170.70 · u=root
[winscp] 10.12.174.210 · u=root
[winscp] 10.30.0.20 · u=adminxutil
[winscp] 10.30.0.69:2202 · u=administrador
[winscp] 10.50.8.106 · u=root
[winscp] 10.50.8.109 · u=root
[winscp] 10.50.8.123 · u=root
[winscp] 10.50.8.124 · u=root
[winscp] 192.168.56.101 · u=root
[winscp] 192.168.56.101 · u=server
[winscp] 192.168.56.102 · u=server
[winscp] 192.168.56.104 · u=root
[login] certificados.xetid.cu · u=nairoviss
[login] distra-acinox.prod.xetid.cu · u=administrador
[login] distra-aseguramientocomercio.prod.xetid.cu · u=administrador
[login] distra-cementomariel.prod.xetid.cu · u=administrador
[login] distra-dipmariel.prod.xetid.cu · u=administrador
[login] distra-divep.prod.xetid.cu · u=administrador
[login] distra-sigerh.prod.xetid.cu · u=adelaida
[login] distra.encomil.co.cu · u=logistica1
[login] distra.soygraf.cu · u=confin2
[login] distra.suchel.co.cu · u=inv
[login] idp.ecmmariel.cu · u=kenier
[login] internet-cd.xetid.cu · u=ixabella
[login] internet-sp.xetid.cu · u=algo
[login] internet-sp.xetid.cu · u=algo
[login] internet-sp.xetid.cu · u=ixabella
[login] internet-sp.xetid.cu · u=ygonzaleza
[login] sp-gespro.prod.xetid.cu · u=algo
ATTACK-SURFACE / EXPOSURE MAP — Shodan InternetDB (public index, read-only)
1,683 checked · 365 indexed 70 with known CVEs Full detail →
MOST-EXPOSED STATE HOSTS (by CVE count)
No CVE-exposed hosts in this filter.
TOP EXPOSED PORTS
80 256 hosts
443 220 hosts
53 90 hosts
25 68 hosts
22 44 hosts
465 40 hosts
993 40 hosts
2087 40 hosts
2083 39 hosts
2086 37 hosts
2082 36 hosts
587 34 hosts
143 31 hosts
8443 29 hosts
FINGERPRINTED SOFTWARE
f5:nginx 86
apache:http_server 40
postfix:postfix 38
canonical:ubuntu_linux 35
openbsd:openssh:8.2p1 20
linux:linux_kernel 19
cloudflare:cloudflare 19
debian:debian_linux 16
getbootstrap:bootstrap 15
jquery:jquery 13
openresty:openresty:1.31.1.1 13
openresty:lua-nginx-module:1.31.1.1 11
Source: Shodan InternetDB — a public index of internet-facing services. Read-only; CubaIntel never connects to, scans, or exploits any host. Coverage is bounded and reflects what Shodan has indexed, not a complete survey.
HOSTS / DBs (raw_hosts.txt) · 1
⇩ CSV
10.12.163.35 xetid_internal ·444615
URLS — STATE-AFFILIATED
63 total
⇩ CSV
10.12.163.35/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · internal_ip_app · 256852 hits
10.12.163.35/logistica/inventario/entrada/entrada/index.php/apertura/gestapertura
http · internal_ip_app · 108792 hits
10.12.163.35/logistica/inventario/movimiento/index.php/transferenciainterna/transferenciainterna
http · internal_ip_app · 16283 hits
10.12.163.35/logistica/inventario/operaciones/index.php/calcularmaxmin/calcularmaxmin
http · internal_ip_app · 12465 hits
10.12.163.35/logistica/utiles/nomencladores/index.php/nomencladores/nomencladores
http · internal_ip_app · 11274 hits
10.12.163.35/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · internal_ip_app · 11189 hits
10.12.163.35/portal/index.php/portal/portal
http · internal_ip_app · 8739 hits
10.12.163.35/portal/
http · internal_ip_app · 4379 hits
10.12.163.35/logistica/inventario/entrada/entrada/index.php/recepcion/gestrecepcion
http · internal_ip_app · 3384 hits
10.12.163.35/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 1957 hits
10.12.163.35/logistica/inventario/movimiento/index.php/ajuste/ajuste
http · internal_ip_app · 1371 hits
10.12.163.35/seguridad/index.php/configaccesos/configaccesos
http · internal_ip_app · 1190 hits
10.12.163.35/ServiceProvider/ACS/
http · internal_ip_app · 917 hits
10.12.163.35/metadatos/estructura/index.php/estructura/gestionarEstructura
http · internal_ip_app · 617 hits
10.12.163.35/logistica/inventario/entrada/entrada/index.php/apertura/gestapertura
http · internal_ip_app · 570 hits
10.12.163.35/configuracion/nomgenerales/index.php/nomencladoresgenerales/nomencladoresgenerales
http · internal_ip_app · 481 hits
10.12.163.35/logistica/facturacion/puntoventa/index.php/configuracionpuntoventa/configuracionpuntoventa
http · internal_ip_app · 399 hits
10.12.163.35/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 377 hits
10.12.163.35/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · internal_ip_app · 371 hits
10.12.163.35/configuracion/formatos/index.php/formatos/gestionarformatos
http · internal_ip_app · 263 hits
10.12.163.35/configuracion/subsistemas/index.php/gestsubsistemas/gestsubsistemas
http · internal_ip_app · 263 hits
10.12.163.35/portal/index.php
http · internal_ip_app · 248 hits
10.12.163.35/logistica/farmacia/farmacia/index.php/tarjetamedicamento/tarjetamedicamento
http · internal_ip_app · 235 hits
10.12.163.35/logistica/inventario/movimiento/index.php/transferenciarea/transferenciarea
http · internal_ip_app · 224 hits
10.12.163.35/logistica/utiles/nomencladores/index.php/nomencladores/nomencladores
http · internal_ip_app · 221 hits
10.12.163.35/logistica/inventario/recuperaciones/index.php/submayorinventario/gestsubmayor
http · internal_ip_app · 195 hits
10.12.163.35/configuracion/documento/index.php/documentos/documentos
http · internal_ip_app · 153 hits
10.12.163.35/seguridad/index.php/configaccesos/configaccesos
http · internal_ip_app · 145 hits
10.12.163.35/configuracion/fecha/index.php/gestionarfecha/gestionarfecha
http · internal_ip_app · 133 hits
10.12.163.35/configuracion/clientesyproveedores/index.php/clientesyproveedores/clientesyproveedores
http · internal_ip_app · 98 hits
10.12.163.35/logistica/utiles/nomencladores/index.php/nomencladores/nomencladores
http · internal_ip_app · 83 hits
10.12.163.35/metadatos/metaconfig/index.php/metaconfig/metaConfig
http · internal_ip_app · 72 hits
10.12.163.35/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · internal_ip_app · 60 hits
10.12.163.35/logistica/inventario/operaciones/calculomaxmin/index.php/calculomaxmin/calculomaxmin
http · internal_ip_app · 57 hits
10.12.163.35/logistica/inventario/movimiento/index.php/ajuste/ajuste
http · internal_ip_app · 56 hits
10.12.163.35/configuracion/documento/index.php/nomdocumento/nomdocumento
http · internal_ip_app · 54 hits
10.12.163.35/logistica/utiles/tablerocontrol/index.php/tablerocontrol/tablerocontrol
http · internal_ip_app · 48 hits
10.12.163.35/configuracion/modeloscontabilizacion/gestoperaciones/index.php/gestoperaciones/gestoperaciones
http · internal_ip_app · 42 hits
10.12.163.35/configuracion/multimoneda/index.php/gestnommoneda/gestnommoneda
http · internal_ip_app · 40 hits
10.12.163.35/seguridad/index.php/configuracion/configuracion
http · internal_ip_app · 38 hits
10.12.163.35/metadatos/estructura/index.php/estructura/gestionarEstructura
http · internal_ip_app · 34 hits
10.12.163.35/seguridad/index.php/gestnomdominio/gestnomdominio
http · internal_ip_app · 30 hits
10.12.163.35/configuracion/especialidad/index.php/especialidad/gestionaresp
http · internal_ip_app · 26 hits
10.12.163.35/configuracion/documento/index.php/documentos/documentos
http · internal_ip_app · 25 hits
10.12.163.35/logistica/inventario/operaciones/index.php/calcularmaxmin/calcularmaxmin
http · internal_ip_app · 21 hits
10.12.163.35/configuracion/nomgenerales/index.php/nomencladoresgenerales/nomencladoresgenerales
http · internal_ip_app · 19 hits
10.12.163.35/configuracion/ejerciciosyperiodos/index.php/ejercicios/gestionarejercicios
http · internal_ip_app · 18 hits
10.12.163.35/configuracion/subsistemas/index.php/gestsubsistemas/gestsubsistemas
http · internal_ip_app · 17 hits
10.12.163.35/logistica/utiles/maestroproductos/index.php/gestgruposubgrupo/gestgruposubgrupo
http · internal_ip_app · 16 hits
10.12.163.35/seguridad/index.php/gestsesion/gestsesion
http · internal_ip_app · 14 hits
1 / 2 Next →