🌐 State IT Infrastructure — LEAKS Intel
· Cuban gov hosts + URLs + IP subnets · linked to state mailboxes
STATE URLS
10,110
100% of all URLs
URL HITS (cumulative)
837,961
UNIQUE STATE HOSTS
1+
17 internal /24 subnets
TOP STATE HOSTS — by URL hits
| Host | URLs | Total hits | Mailbox? |
|---|---|---|---|
| bienestar-lisa.prod.xetid.cu | 35 | 214 | — |
INTERNAL SUBNETS /24
10.12.163.0/24
597,134 hits
10.12.170.0/24
82 hits
10.12.29.0/24
68 hits
10.12.38.0/24
29 hits
10.12.35.0/24
17 hits
10.12.173.0/24
16 hits
10.12.167.0/24
11 hits
10.12.45.0/24
10 hits
10.12.46.0/24
8 hits
10.12.34.0/24
4 hits
10.12.171.0/24
2 hits
10.12.3.0/24
2 hits
10.12.47.0/24
2 hits
192.168.0.0/24
2 hits
10.12.161.0/24
1 hits
10.12.174.0/24
1 hits
192.168.223.0/24
1 hits
🔓 LEAKED INTERNAL HOSTS — 109 named in the regime's own leaked docs · 28 corroborated live
TOP STATE IPs — by mentions
No IPs ingested yet.
TOP STATE /24 SUBNETS
10.12.163.0/24
xetid_internal
144 IPs · 156,046,215
10.12.45.0/24
xetid_internal
49 IPs · 29,920,644
10.12.46.0/24
xetid_internal
90 IPs · 26,914,488
10.12.24.0/24
xetid_internal
18 IPs · 3,885,483
10.12.44.0/24
xetid_internal
30 IPs · 2,076,399
10.12.40.0/24
xetid_internal
46 IPs · 1,239,942
200.55.173.0/24
cuban_external
2 IPs · 1,212,405
10.30.0.0/24
internal_rfc1918
13 IPs · 752,184
10.12.165.0/24
xetid_internal
41 IPs · 733,869
10.12.29.0/24
xetid_internal
90 IPs · 627,846
10.12.171.0/24
xetid_internal
2 IPs · 584,916
10.30.118.0/24
internal_rfc1918
12 IPs · 402,231
STATE DB / SSH INFRASTRUCTURE (metadata only — no credentials)
[postgres]
Genesig.BD9.xetid:5432 · db=Genesig_2.0_guantanamo · u=ing
[other]
Git.BD.xetid · db=git · u=zeolides
[winscp]
10.12.0.11 · u=root
[winscp]
10.12.151.30 · u=server
[winscp]
10.12.151.31 · u=server
[winscp]
10.12.151.32 · u=server
[winscp]
10.12.151.36 · u=server
[winscp]
10.12.151.47 · u=%EF%BB%BFpe%C3%B1a
[winscp]
10.12.151.67:9010 · u=administrador
[winscp]
10.12.151.67:9011 · u=adminxutil
[winscp]
10.12.151.67:9012 · u=administrador
[winscp]
10.12.151.67:9014 · u=administrador
[winscp]
10.12.151.67:9015 · u=adminxutil
[winscp]
10.12.151.67:9016 · u=adminxutil
[winscp]
10.12.170.117 · u=root
[winscp]
10.12.170.125 · u=root
[winscp]
10.12.170.136 · u=root
[winscp]
10.12.170.23 · u=root
[winscp]
10.12.170.70 · u=root
[winscp]
10.12.174.210 · u=root
[winscp]
10.30.0.20 · u=adminxutil
[winscp]
10.30.0.69:2202 · u=administrador
[winscp]
10.50.8.106 · u=root
[winscp]
10.50.8.109 · u=root
[winscp]
10.50.8.123 · u=root
[winscp]
10.50.8.124 · u=root
[winscp]
192.168.56.101 · u=root
[winscp]
192.168.56.101 · u=server
[winscp]
192.168.56.102 · u=server
[winscp]
192.168.56.104 · u=root
[login]
certificados.xetid.cu
· u=nairoviss
[login]
distra-acinox.prod.xetid.cu
· u=administrador
[login]
distra-aseguramientocomercio.prod.xetid.cu
· u=administrador
[login]
distra-cementomariel.prod.xetid.cu
· u=administrador
[login]
distra-dipmariel.prod.xetid.cu
· u=administrador
[login]
distra-divep.prod.xetid.cu
· u=administrador
[login]
distra-sigerh.prod.xetid.cu
· u=adelaida
[login]
distra.encomil.co.cu
· u=logistica1
[login]
distra.soygraf.cu
· u=confin2
[login]
distra.suchel.co.cu
· u=inv
[login]
idp.ecmmariel.cu
· u=kenier
[login]
internet-cd.xetid.cu
· u=ixabella
[login]
internet-sp.xetid.cu
· u=algo
[login]
internet-sp.xetid.cu
· u=algo
[login]
internet-sp.xetid.cu
· u=ixabella
[login]
internet-sp.xetid.cu
· u=ygonzaleza
[login]
sp-gespro.prod.xetid.cu
· u=algo
ATTACK-SURFACE / EXPOSURE MAP — Shodan InternetDB (public index, read-only)
1,683 checked · 365 indexed
70 with known CVEs Full detail →
MOST-EXPOSED STATE HOSTS (by CVE count)
No CVE-exposed hosts in this filter.
TOP EXPOSED PORTS
80
256 hosts
443
220 hosts
53
90 hosts
25
68 hosts
22
44 hosts
465
40 hosts
993
40 hosts
2087
40 hosts
2083
39 hosts
2086
37 hosts
2082
36 hosts
587
34 hosts
143
31 hosts
8443
29 hosts
FINGERPRINTED SOFTWARE
f5:nginx
86
apache:http_server
40
postfix:postfix
38
canonical:ubuntu_linux
35
openbsd:openssh:8.2p1
20
linux:linux_kernel
19
cloudflare:cloudflare
19
debian:debian_linux
16
getbootstrap:bootstrap
15
jquery:jquery
13
openresty:openresty:1.31.1.1
13
openresty:lua-nginx-module:1.31.1.1
11
Source: Shodan InternetDB — a public index of internet-facing services. Read-only; CubaIntel never connects to, scans, or exploits any host. Coverage is bounded and reflects what Shodan has indexed, not a complete survey.
HOSTS / DBs (raw_hosts.txt) · 1
⇩ CSV
bienestar-lisa.prod.xetid.cu
xetid_internal
·282
URLS — STATE-AFFILIATED
35 total
⇩ CSVbienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobvcl/tracker/login
https · xetid_web · 60 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobhab_lisa/tracker/login
https · xetid_web · 28 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/neoclassic/tracker/login
https · xetid_web · 18 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobvcl/cases/opencase/7245979855e8dee43c9a3b6094206307
https · xetid_web · 16 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/neoclassic/en/cases/cases_ShowOutputDocument
https · xetid_web · 16 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobvcl/cases/opencase/7088358985e8e0e5c1b7309079353288
https · xetid_web · 6 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/neoclassic/en/cases/cases_ShowOutputDocument
https · xetid_web · 6 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobhab_lisa/cases/opencase/6559853305e86afe9aa5410053092991
https · xetid_web · 4 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobhab_lisa/cases/opencase/7199433585e86ace99da4b5079241804
https · xetid_web · 4 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/neoclassic/en/cases/cases_ShowOutputDocument
https · xetid_web · 4 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/neoclassic/en/cases/cases_ShowOutputDocument
https · xetid_web · 4 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobhab_lisa/cases/opencase/2716240495e9cdfd70126c3038214947
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobhab_lisa/cases/opencase/4579762825e9cd2f922dd29003074643
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobhab_lisa/cases/opencase/4616748045e9609f1ac6453073633626
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobhab_lisa/cases/opencase/9809113875e9b7a5fb4b0c4006039241
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobvcl/cases/opencase/1616096385e976859e8a797035921093
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobvcl/cases/opencase/1736303625e8791089961e6042856101
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobvcl/cases/opencase/2556145355e8df30231c1f4000153016
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobvcl/cases/opencase/5232124325e8e0e1d2c57e2005562702
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobvcl/cases/opencase/5375449865e8df161756b66069879245
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobvcl/cases/opencase/7276379075e985cf30ab591046664267
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobvcl/cases/opencase/7947647115e975e0f2948f1055427694
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/gobvcl/cases/opencase/8541273075e8e105ac0e302037562795
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/neoclassic/cases/opencase/1660005605e9b78d56546f2099841867
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/neoclassic/cases/opencase/2283310625e97627c70ef47031430509
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/neoclassic/cases/opencase/2433267915e985e61a6ca59080432420
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/neoclassic/cases/opencase/2584893515e960c55cfb039062408929
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/neoclassic/cases/opencase/3758577655e975fe1737e02086594958
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/neoclassic/cases/opencase/5063374835e97616b8e7775028231275
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/neoclassic/cases/opencase/5632256595e88c68e8beec3046360754
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/neoclassic/cases/opencase/6396978325e88c372d13844095900326
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/es-ES/neoclassic/cases/opencase/7683900185e9763222e5675063677287
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/neoclassic/en/cases/cases_ShowOutputDocument
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/neoclassic/en/cases/cases_ShowOutputDocument
https · xetid_web · 2 hits
bienestar-lisa.prod.xetid.cu/sysvivienda_habitat/neoclassic/en/cases/cases_ShowOutputDocument
https · xetid_web · 2 hits
