🌐 State IT Infrastructure — LEAKS Intel · Cuban gov hosts + URLs + IP subnets · linked to state mailboxes
STATE URLS
10,110
100% of all URLs
URL HITS (cumulative)
837,961
UNIQUE STATE HOSTS
6+
17 internal /24 subnets
STATE EMAILS
3,330
view all →
All gobcu_web (9266) xetid_web (529) internal_ip_app (315)
TOP STATE HOSTS — by URL hits
Host URLs Total hits Mailbox?
10.12.170.159 25 59 —
10.12.170.106 3 16 —
10.12.170.124 2 2 —
10.12.170.10 1 2 —
10.12.170.125 1 2 —
10.12.170.140 1 1 —
INTERNAL SUBNETS /24
10.12.163.0/24 597,134 hits
10.12.170.0/24 82 hits
10.12.29.0/24 68 hits
10.12.38.0/24 29 hits
10.12.35.0/24 17 hits
10.12.173.0/24 16 hits
10.12.167.0/24 11 hits
10.12.45.0/24 10 hits
10.12.46.0/24 8 hits
10.12.34.0/24 4 hits
10.12.171.0/24 2 hits
10.12.3.0/24 2 hits
10.12.47.0/24 2 hits
192.168.0.0/24 2 hits
10.12.161.0/24 1 hits
10.12.174.0/24 1 hits
192.168.223.0/24 1 hits
🔓 LEAKED INTERNAL HOSTS — 109 named in the regime's own leaked docs · 28 corroborated live
Internal hostMentionsCorroborationAppears in
xetid.cu 479 ✓ live-confirmed Propuesta Oferta de productos y servicios de la division SATD.pdf →
soporte.xutil.cu 67 ✓ live-confirmed WORD.doc →
www.xetid.cu 51 ✓ live-confirmed 0_SolicitudCertificaciónSegurmática_R1.docx →
dpjca.minjus.gob.cu 35 leak-only usuarios.docx →
dpjch.minjus.gob.cu 32 leak-only cerro.xlsx →
misarchivos.xetid.cu 26 ✓ live-confirmed leeme.txt →
www.xutil.cu 24 leak-only 649-N-Cv-20 Servicio de Diseño, Desarrollo, Prueba Experimental y Despliegue Tienda Virtual para la Empresa Mayorista de VC.doc →
ftp.xetid.cu 22 leak-only leeme.txt →
hlg.xetid.cu 20 leak-only Know How Servidor Ejabberd.pdf →
registro.hlg.xetid.cu 18 leak-only Know How Servidor SqStat.pdf →
soporte.xetid.cu 15 ✓ live-confirmed Acta de Resp. Mat. de ORESTES RODRIGUEZ LORENZO.pdf →
doc-dsp.xetid.cu 13 leak-only 2-Daniel E Perez Rojas.doc →
dpjhg.minjus.gob.cu 13 leak-only VV-v1.2.0.doc →
dgtic.hlg.xetid.cu 12 leak-only Know How Servidor Web Proxy Inverso.pdf →
doc-dge.xetid.cu 12 leak-only 17-Yoandy Cervela Sanchez.doc →
ns.hlg.xetid.cu 9 leak-only Know How Servidor de Nombres de Dominio.pdf →
ns1.hlg.xetid.cu 8 leak-only Know How Servidor de Nombres de Dominio.pdf →
tramites.xetid.cu 8 leak-only README.md →
dgtic-db.hlg.xetid.cu 7 leak-only Know How Aplicación Web DGTIC.pdf →
alfresco-egob.prod.xetid.cu 6 leak-only Informe del autocontrol de UHU_19-06-18.pdf →
distra.xetid.cu 6 leak-only hosts.txt →
internet-sp.xetid.cu 6 ✓ live-confirmed logins.csv →
chat.hlg.xetid.cu 4 leak-only Know How Servidor Ejabberd.pdf →
dfile-egob.prod.xetid.cu 4 ✓ live-confirmed leeme.txt →
ecocem-ssl.xetid.cu 4 leak-only public_site.sh______-###############.txt →
gespro-stpc.xetid.cu 4 leak-only 19-Yudelyn Reyes Navarro.doc →
portal-mindus.xutil.cu 4 leak-only hosts.txt →
xsgc-calidad.xetid.cu 4 leak-only 6-Riandrys Gongora Roman.doc →
calidad.xetid.cu 3 leak-only 2-Daniel E Perez Rojas.doc →
correo.hlg.xetid.cu 3 leak-only Know How Servidor Samba4.pdf →
cxs.xetid.cu 3 ✓ live-confirmed Pasos a seguir.txt.txt →
ejemplo.xetid.cu 3 leak-only Drupal.txt.txt →
intranet.xetid.cu 3 leak-only 15-Alberto M Kile Osoria.doc →
mail.hlg.xetid.cu 3 leak-only Know How Servidor de Nombres de Dominio.pdf →
proxy.hlg.xetid.cu 3 leak-only Know How Servidor SqStat.pdf →
root.hlg.xetid.cu 3 leak-only Know How Servidor de Nombres de Dominio.pdf →
servicios.xetid.cu 3 leak-only ACTA DE RESPONSABILIDADIVAN HERNANDEZ RAVELO.pdf →
www.minal.gob.cu 3 leak-only Proyecto Técnico para el desarrollo del Portal web del Ministerio de Industria Alimentaria (MINAL) .docx →
automat-calidad.xetid.cu 2 leak-only 6-Riandrys Gongora Roman.doc →
bienestar-juristas.prod.xetid.cu 2 leak-only hosts.txt →
TOP STATE IPs — by mentions
10.12.170.10 xetid_internal 107,482
10.12.170.159 xetid_internal 87,962
10.12.170.105 xetid_internal 54,534
10.12.170.62 xetid_internal 6,364
10.12.170.175 xetid_internal 5,934
10.12.170.140 xetid_internal 5,246
10.12.170.138 xetid_internal 3,440
10.12.170.137 xetid_internal 2,752
10.12.170.102 xetid_internal 2,580
10.12.170.75 xetid_internal 2,408
10.12.170.139 xetid_internal 2,064
10.12.170.106 xetid_internal 1,978
10.12.170.211 xetid_internal 1,892
10.12.170.100 xetid_internal 1,892
10.12.170.136 xetid_internal 1,548
10.12.170.23 xetid_internal 1,376
10.12.170.50 xetid_internal 1,290
10.12.170.125 xetid_internal 1,204
10.12.170.117 xetid_internal 1,204
10.12.170.52 xetid_internal 1,118
10.12.170.70 xetid_internal 946
10.12.170.53 xetid_internal 602
10.12.170.134 xetid_internal 516
10.12.170.56 xetid_internal 430
10.12.170.116 xetid_internal 344
TOP STATE /24 SUBNETS
10.12.163.0/24 xetid_internal 144 IPs · 154,777,378
10.12.45.0/24 xetid_internal 49 IPs · 29,677,284
10.12.46.0/24 xetid_internal 90 IPs · 26,695,376
10.12.24.0/24 xetid_internal 18 IPs · 3,853,834
10.12.44.0/24 xetid_internal 30 IPs · 2,059,386
10.12.40.0/24 xetid_internal 46 IPs · 1,229,680
200.55.173.0/24 cuban_external 2 IPs · 1,202,546
10.30.0.0/24 internal_rfc1918 13 IPs · 746,040
10.12.165.0/24 xetid_internal 41 IPs · 727,854
10.12.29.0/24 xetid_internal 90 IPs · 622,556
10.12.171.0/24 xetid_internal 2 IPs · 580,160
10.30.118.0/24 internal_rfc1918 12 IPs · 398,914
STATE DB / SSH INFRASTRUCTURE (metadata only — no credentials)
[postgres] Genesig.BD9.xetid:5432 · db=Genesig_2.0_guantanamo · u=ing
[other] Git.BD.xetid · db=git · u=zeolides
[winscp] 10.12.0.11 · u=root
[winscp] 10.12.151.30 · u=server
[winscp] 10.12.151.31 · u=server
[winscp] 10.12.151.32 · u=server
[winscp] 10.12.151.36 · u=server
[winscp] 10.12.151.47 · u=%EF%BB%BFpe%C3%B1a
[winscp] 10.12.151.67:9010 · u=administrador
[winscp] 10.12.151.67:9011 · u=adminxutil
[winscp] 10.12.151.67:9012 · u=administrador
[winscp] 10.12.151.67:9014 · u=administrador
[winscp] 10.12.151.67:9015 · u=adminxutil
[winscp] 10.12.151.67:9016 · u=adminxutil
[winscp] 10.12.170.117 · u=root
[winscp] 10.12.170.125 · u=root
[winscp] 10.12.170.136 · u=root
[winscp] 10.12.170.23 · u=root
[winscp] 10.12.170.70 · u=root
[winscp] 10.12.174.210 · u=root
[winscp] 10.30.0.20 · u=adminxutil
[winscp] 10.30.0.69:2202 · u=administrador
[winscp] 10.50.8.106 · u=root
[winscp] 10.50.8.109 · u=root
[winscp] 10.50.8.123 · u=root
[winscp] 10.50.8.124 · u=root
[winscp] 192.168.56.101 · u=root
[winscp] 192.168.56.101 · u=server
[winscp] 192.168.56.102 · u=server
[winscp] 192.168.56.104 · u=root
[login] certificados.xetid.cu · u=nairoviss
[login] distra-acinox.prod.xetid.cu · u=administrador
[login] distra-aseguramientocomercio.prod.xetid.cu · u=administrador
[login] distra-cementomariel.prod.xetid.cu · u=administrador
[login] distra-dipmariel.prod.xetid.cu · u=administrador
[login] distra-divep.prod.xetid.cu · u=administrador
[login] distra-sigerh.prod.xetid.cu · u=adelaida
[login] distra.encomil.co.cu · u=logistica1
[login] distra.soygraf.cu · u=confin2
[login] distra.suchel.co.cu · u=inv
[login] idp.ecmmariel.cu · u=kenier
[login] internet-cd.xetid.cu · u=ixabella
[login] internet-sp.xetid.cu · u=algo
[login] internet-sp.xetid.cu · u=algo
[login] internet-sp.xetid.cu · u=ixabella
[login] internet-sp.xetid.cu · u=ygonzaleza
[login] sp-gespro.prod.xetid.cu · u=algo
ATTACK-SURFACE / EXPOSURE MAP — Shodan InternetDB (public index, read-only)
1,683 checked · 365 indexed 70 with known CVEs Full detail →
MOST-EXPOSED STATE HOSTS (by CVE count)
No CVE-exposed hosts in this filter.
TOP EXPOSED PORTS
80 256 hosts
443 220 hosts
53 90 hosts
25 68 hosts
22 44 hosts
465 40 hosts
993 40 hosts
2087 40 hosts
2083 39 hosts
2086 37 hosts
2082 36 hosts
587 34 hosts
143 31 hosts
8443 29 hosts
FINGERPRINTED SOFTWARE
f5:nginx 86
apache:http_server 40
postfix:postfix 38
canonical:ubuntu_linux 35
openbsd:openssh:8.2p1 20
linux:linux_kernel 19
cloudflare:cloudflare 19
debian:debian_linux 16
getbootstrap:bootstrap 15
jquery:jquery 13
openresty:openresty:1.31.1.1 13
openresty:lua-nginx-module:1.31.1.1 11
Source: Shodan InternetDB — a public index of internet-facing services. Read-only; CubaIntel never connects to, scans, or exploits any host. Coverage is bounded and reflects what Shodan has indexed, not a complete survey.
HOSTS / DBs (raw_hosts.txt) · 6
⇩ CSV
10.12.170.159 xetid_internal ·59
10.12.170.106 xetid_internal ·16
10.12.170.125 xetid_internal ·2
10.12.170.124 xetid_internal ·2
10.12.170.10 xetid_internal ·2
10.12.170.140 xetid_internal ·1
URLS — STATE-AFFILIATED
33 total
⇩ CSV
10.12.170.159/GIS/wms/index.php
http · internal_ip_app · 8 hits
10.12.170.106/pvd/persona/services/webservices/PersonaService.wsdl
http · internal_ip_app · 7 hits
10.12.170.106/seguridad/webservices/AcaxiaSoapAutentication.wsdl
http · internal_ip_app · 7 hits
10.12.170.159/GIS/wms
http · internal_ip_app · 6 hits
10.12.170.159/cgi-bin/mapserv
http · internal_ip_app · 6 hits
10.12.170.159/GIS/wms/
http · internal_ip_app · 5 hits
10.12.170.159/mapcache
http · internal_ip_app · 5 hits
10.12.170.159/GIS/wms/google-wms-m.php
http · internal_ip_app · 3 hits
10.12.170.159/cgi-bin/mapserv
http · internal_ip_app · 3 hits
10.12.170.159/cgi-bin/mapserv
http · internal_ip_app · 3 hits
10.12.170.159/mapcache
http · internal_ip_app · 3 hits
10.12.170.106/
http · internal_ip_app · 2 hits
10.12.170.10/
http · internal_ip_app · 2 hits
10.12.170.125/simem/GIS/get-nodes.php
http · internal_ip_app · 2 hits
10.12.170.159/GIS/wms/a
http · internal_ip_app · 2 hits
10.12.170.124/Planificacion_Pdo/branches/pdo/
http · internal_ip_app · 1 hits
10.12.170.124/Planificacion_Workflow/branches/workflow/
http · internal_ip_app · 1 hits
10.12.170.140/
http · internal_ip_app · 1 hits
10.12.170.159/
http · internal_ip_app · 1 hits
10.12.170.159/GIS/wms/google-wms-m.php
http · internal_ip_app · 1 hits
10.12.170.159/GIS/wms/index.php
http · internal_ip_app · 1 hits
10.12.170.159/GIS2/gis_Genesig_v2/branches/desarrollo/htdocs/index.php
http · internal_ip_app · 1 hits
10.12.170.159/GIS2/gis_Genesig_v2/branches/desarrollo/htdocs/video/-1/866/Autopista
http · internal_ip_app · 1 hits
10.12.170.159/GIS2/gis_Genesig_v2/branches/desarrollo/projects/comones/server_conf/geoweb/userMaps/-1.map
http · internal_ip_app · 1 hits
10.12.170.159/cgi-bin/mapserv
http · internal_ip_app · 1 hits
10.12.170.159/cgi-bin/mapserv
http · internal_ip_app · 1 hits
10.12.170.159/cgi-bin/mapserv
http · internal_ip_app · 1 hits
10.12.170.159/cgi-bin/mapserv
http · internal_ip_app · 1 hits
10.12.170.159/cgi-bin/mapserv
http · internal_ip_app · 1 hits
10.12.170.159/cgi-bin/mapserv
http · internal_ip_app · 1 hits
10.12.170.159/mapcache/
http · internal_ip_app · 1 hits
10.12.170.159/
https · internal_ip_app · 1 hits
10.12.170.159/GIS/wms
https · internal_ip_app · 1 hits