🌐 State IT Infrastructure — LEAKS Intel · Cuban gov hosts + URLs + IP subnets · linked to state mailboxes
STATE URLS
10,110
100% of all URLs
URL HITS (cumulative)
837,961
UNIQUE STATE HOSTS
6+
17 internal /24 subnets
STATE EMAILS
3,330
view all →
All gobcu_web (9266) xetid_web (529) internal_ip_app (315)
TOP STATE HOSTS — by URL hits
Host URLs Total hits Mailbox?
10.12.38.138 5 29 —
10.12.35.4 2 16 —
10.12.34.27 1 3 —
10.12.3.45 1 2 —
10.12.34.6 1 1 —
10.12.35.6 1 1 —
INTERNAL SUBNETS /24
10.12.163.0/24 597,134 hits
10.12.170.0/24 82 hits
10.12.29.0/24 68 hits
10.12.38.0/24 29 hits
10.12.35.0/24 17 hits
10.12.173.0/24 16 hits
10.12.167.0/24 11 hits
10.12.45.0/24 10 hits
10.12.46.0/24 8 hits
10.12.34.0/24 4 hits
10.12.171.0/24 2 hits
10.12.3.0/24 2 hits
10.12.47.0/24 2 hits
192.168.0.0/24 2 hits
10.12.161.0/24 1 hits
10.12.174.0/24 1 hits
192.168.223.0/24 1 hits
🔓 LEAKED INTERNAL HOSTS — 109 named in the regime's own leaked docs · 28 corroborated live
Internal hostMentionsCorroborationAppears in
xetid.cu 479 ✓ live-confirmed Propuesta Oferta de productos y servicios de la division SATD.pdf →
soporte.xutil.cu 67 ✓ live-confirmed WORD.doc →
www.xetid.cu 51 ✓ live-confirmed 0_SolicitudCertificaciónSegurmática_R1.docx →
dpjca.minjus.gob.cu 35 leak-only usuarios.docx →
dpjch.minjus.gob.cu 32 leak-only cerro.xlsx →
misarchivos.xetid.cu 26 ✓ live-confirmed leeme.txt →
www.xutil.cu 24 leak-only 649-N-Cv-20 Servicio de Diseño, Desarrollo, Prueba Experimental y Despliegue Tienda Virtual para la Empresa Mayorista de VC.doc →
ftp.xetid.cu 22 leak-only leeme.txt →
hlg.xetid.cu 20 leak-only Know How Servidor Ejabberd.pdf →
registro.hlg.xetid.cu 18 leak-only Know How Servidor SqStat.pdf →
soporte.xetid.cu 15 ✓ live-confirmed Acta de Resp. Mat. de ORESTES RODRIGUEZ LORENZO.pdf →
doc-dsp.xetid.cu 13 leak-only 2-Daniel E Perez Rojas.doc →
dpjhg.minjus.gob.cu 13 leak-only VV-v1.2.0.doc →
dgtic.hlg.xetid.cu 12 leak-only Know How Servidor Web Proxy Inverso.pdf →
doc-dge.xetid.cu 12 leak-only 17-Yoandy Cervela Sanchez.doc →
ns.hlg.xetid.cu 9 leak-only Know How Servidor de Nombres de Dominio.pdf →
ns1.hlg.xetid.cu 8 leak-only Know How Servidor de Nombres de Dominio.pdf →
tramites.xetid.cu 8 leak-only README.md →
dgtic-db.hlg.xetid.cu 7 leak-only Know How Aplicación Web DGTIC.pdf →
alfresco-egob.prod.xetid.cu 6 leak-only Informe del autocontrol de UHU_19-06-18.pdf →
distra.xetid.cu 6 leak-only hosts.txt →
internet-sp.xetid.cu 6 ✓ live-confirmed logins.csv →
chat.hlg.xetid.cu 4 leak-only Know How Servidor Ejabberd.pdf →
dfile-egob.prod.xetid.cu 4 ✓ live-confirmed leeme.txt →
ecocem-ssl.xetid.cu 4 leak-only public_site.sh______-###############.txt →
gespro-stpc.xetid.cu 4 leak-only 19-Yudelyn Reyes Navarro.doc →
portal-mindus.xutil.cu 4 leak-only hosts.txt →
xsgc-calidad.xetid.cu 4 leak-only 6-Riandrys Gongora Roman.doc →
calidad.xetid.cu 3 leak-only 2-Daniel E Perez Rojas.doc →
correo.hlg.xetid.cu 3 leak-only Know How Servidor Samba4.pdf →
cxs.xetid.cu 3 ✓ live-confirmed Pasos a seguir.txt.txt →
ejemplo.xetid.cu 3 leak-only Drupal.txt.txt →
intranet.xetid.cu 3 leak-only 15-Alberto M Kile Osoria.doc →
mail.hlg.xetid.cu 3 leak-only Know How Servidor de Nombres de Dominio.pdf →
proxy.hlg.xetid.cu 3 leak-only Know How Servidor SqStat.pdf →
root.hlg.xetid.cu 3 leak-only Know How Servidor de Nombres de Dominio.pdf →
servicios.xetid.cu 3 leak-only ACTA DE RESPONSABILIDADIVAN HERNANDEZ RAVELO.pdf →
www.minal.gob.cu 3 leak-only Proyecto Técnico para el desarrollo del Portal web del Ministerio de Industria Alimentaria (MINAL) .docx →
automat-calidad.xetid.cu 2 leak-only 6-Riandrys Gongora Roman.doc →
bienestar-juristas.prod.xetid.cu 2 leak-only hosts.txt →
TOP STATE IPs — by mentions
10.12.39.8 xetid_internal 14,884
10.12.35.80 xetid_internal 5,246
10.12.35.4 xetid_internal 4,472
10.12.36.17 xetid_internal 3,956
10.12.39.5 xetid_internal 2,752
10.12.39.28 xetid_internal 2,752
10.12.36.22 xetid_internal 2,580
10.12.38.138 xetid_internal 2,494
10.12.35.5 xetid_internal 2,150
10.12.38.43 xetid_internal 2,064
10.12.39.24 xetid_internal 1,892
10.12.39.7 xetid_internal 1,376
10.12.39.10 xetid_internal 1,290
10.12.36.2 xetid_internal 1,290
10.12.35.6 xetid_internal 1,204
10.12.36.10 xetid_internal 1,118
10.12.35.3 xetid_internal 1,032
10.12.31.8 xetid_internal 946
10.12.34.27 xetid_internal 860
10.12.39.2 xetid_internal 774
10.12.38.46 xetid_internal 774
10.12.35.100 xetid_internal 774
10.12.31.5 xetid_internal 774
10.12.39.13 xetid_internal 688
10.12.37.17 xetid_internal 688
TOP STATE /24 SUBNETS
10.12.163.0/24 xetid_internal 144 IPs · 154,777,378
10.12.45.0/24 xetid_internal 49 IPs · 29,677,284
10.12.46.0/24 xetid_internal 90 IPs · 26,695,376
10.12.24.0/24 xetid_internal 18 IPs · 3,853,834
10.12.44.0/24 xetid_internal 30 IPs · 2,059,386
10.12.40.0/24 xetid_internal 46 IPs · 1,229,680
200.55.173.0/24 cuban_external 2 IPs · 1,202,546
10.30.0.0/24 internal_rfc1918 13 IPs · 746,040
10.12.165.0/24 xetid_internal 41 IPs · 727,854
10.12.29.0/24 xetid_internal 90 IPs · 622,556
10.12.171.0/24 xetid_internal 2 IPs · 580,160
10.30.118.0/24 internal_rfc1918 12 IPs · 398,914
STATE DB / SSH INFRASTRUCTURE (metadata only — no credentials)
[postgres] Genesig.BD9.xetid:5432 · db=Genesig_2.0_guantanamo · u=ing
[other] Git.BD.xetid · db=git · u=zeolides
[winscp] 10.12.0.11 · u=root
[winscp] 10.12.151.30 · u=server
[winscp] 10.12.151.31 · u=server
[winscp] 10.12.151.32 · u=server
[winscp] 10.12.151.36 · u=server
[winscp] 10.12.151.47 · u=%EF%BB%BFpe%C3%B1a
[winscp] 10.12.151.67:9010 · u=administrador
[winscp] 10.12.151.67:9011 · u=adminxutil
[winscp] 10.12.151.67:9012 · u=administrador
[winscp] 10.12.151.67:9014 · u=administrador
[winscp] 10.12.151.67:9015 · u=adminxutil
[winscp] 10.12.151.67:9016 · u=adminxutil
[winscp] 10.12.170.117 · u=root
[winscp] 10.12.170.125 · u=root
[winscp] 10.12.170.136 · u=root
[winscp] 10.12.170.23 · u=root
[winscp] 10.12.170.70 · u=root
[winscp] 10.12.174.210 · u=root
[winscp] 10.30.0.20 · u=adminxutil
[winscp] 10.30.0.69:2202 · u=administrador
[winscp] 10.50.8.106 · u=root
[winscp] 10.50.8.109 · u=root
[winscp] 10.50.8.123 · u=root
[winscp] 10.50.8.124 · u=root
[winscp] 192.168.56.101 · u=root
[winscp] 192.168.56.101 · u=server
[winscp] 192.168.56.102 · u=server
[winscp] 192.168.56.104 · u=root
[login] certificados.xetid.cu · u=nairoviss
[login] distra-acinox.prod.xetid.cu · u=administrador
[login] distra-aseguramientocomercio.prod.xetid.cu · u=administrador
[login] distra-cementomariel.prod.xetid.cu · u=administrador
[login] distra-dipmariel.prod.xetid.cu · u=administrador
[login] distra-divep.prod.xetid.cu · u=administrador
[login] distra-sigerh.prod.xetid.cu · u=adelaida
[login] distra.encomil.co.cu · u=logistica1
[login] distra.soygraf.cu · u=confin2
[login] distra.suchel.co.cu · u=inv
[login] idp.ecmmariel.cu · u=kenier
[login] internet-cd.xetid.cu · u=ixabella
[login] internet-sp.xetid.cu · u=algo
[login] internet-sp.xetid.cu · u=algo
[login] internet-sp.xetid.cu · u=ixabella
[login] internet-sp.xetid.cu · u=ygonzaleza
[login] sp-gespro.prod.xetid.cu · u=algo
ATTACK-SURFACE / EXPOSURE MAP — Shodan InternetDB (public index, read-only)
1,683 checked · 365 indexed 70 with known CVEs Full detail →
MOST-EXPOSED STATE HOSTS (by CVE count)
No CVE-exposed hosts in this filter.
TOP EXPOSED PORTS
80 256 hosts
443 220 hosts
53 90 hosts
25 68 hosts
22 44 hosts
465 40 hosts
993 40 hosts
2087 40 hosts
2083 39 hosts
2086 37 hosts
2082 36 hosts
587 34 hosts
143 31 hosts
8443 29 hosts
FINGERPRINTED SOFTWARE
f5:nginx 86
apache:http_server 40
postfix:postfix 38
canonical:ubuntu_linux 35
openbsd:openssh:8.2p1 20
linux:linux_kernel 19
cloudflare:cloudflare 19
debian:debian_linux 16
getbootstrap:bootstrap 15
jquery:jquery 13
openresty:openresty:1.31.1.1 13
openresty:lua-nginx-module:1.31.1.1 11
Source: Shodan InternetDB — a public index of internet-facing services. Read-only; CubaIntel never connects to, scans, or exploits any host. Coverage is bounded and reflects what Shodan has indexed, not a complete survey.
HOSTS / DBs (raw_hosts.txt) · 6
⇩ CSV
10.12.38.138 xetid_internal ·29
10.12.35.4 xetid_internal ·16
10.12.34.27 xetid_internal ·3
10.12.3.45 xetid_internal ·2
10.12.35.6 xetid_internal ·1
10.12.34.6 xetid_internal ·1
URLS — STATE-AFFILIATED
11 total
⇩ CSV
10.12.38.138/portal/
http · internal_ip_app · 19 hits
10.12.35.4/portal/
http · internal_ip_app · 9 hits
10.12.35.4/portal/index.php/portal/portal
http · internal_ip_app · 7 hits
10.12.38.138/portal/index.php/portal/portal
http · internal_ip_app · 7 hits
10.12.34.27/portal/
http · internal_ip_app · 3 hits
10.12.3.45/
http · internal_ip_app · 2 hits
10.12.34.6/
http · internal_ip_app · 1 hits
10.12.35.6/portal/index.php/portal/portal
http · internal_ip_app · 1 hits
10.12.38.138/controlacceso/index.php/administracion/administracion
http · internal_ip_app · 1 hits
10.12.38.138/controlacceso/index.php/reportes/reportes
http · internal_ip_app · 1 hits
10.12.38.138/portal/index.php/portal/login
http · internal_ip_app · 1 hits