🌐 State IT Infrastructure — LEAKS Intel
· Cuban gov hosts + URLs + IP subnets · linked to state mailboxes
STATE URLS
10,110
100% of all URLs
URL HITS (cumulative)
837,961
UNIQUE STATE HOSTS
3+
17 internal /24 subnets
TOP STATE HOSTS — by URL hits
| Host | URLs | Total hits | Mailbox? |
|---|---|---|---|
| www.mindus.gob.cu | 306 | 13,235 | — |
| www.mindus.gob.cu, | 1 | 2 | — |
| www.mindus.gob.cud_nmqvh2hyykb9u741ypgt6fnozeak2k2vafpmxsh0u | 1 | 1 | — |
INTERNAL SUBNETS /24
10.12.163.0/24
597,134 hits
10.12.170.0/24
82 hits
10.12.29.0/24
68 hits
10.12.38.0/24
29 hits
10.12.35.0/24
17 hits
10.12.173.0/24
16 hits
10.12.167.0/24
11 hits
10.12.45.0/24
10 hits
10.12.46.0/24
8 hits
10.12.34.0/24
4 hits
10.12.171.0/24
2 hits
10.12.3.0/24
2 hits
10.12.47.0/24
2 hits
192.168.0.0/24
2 hits
10.12.161.0/24
1 hits
10.12.174.0/24
1 hits
192.168.223.0/24
1 hits
🔓 LEAKED INTERNAL HOSTS — 109 named in the regime's own leaked docs · 28 corroborated live
TOP STATE IPs — by mentions
No IPs ingested yet.
TOP STATE /24 SUBNETS
10.12.163.0/24
xetid_internal
144 IPs · 156,046,215
10.12.45.0/24
xetid_internal
49 IPs · 29,920,644
10.12.46.0/24
xetid_internal
90 IPs · 26,914,488
10.12.24.0/24
xetid_internal
18 IPs · 3,885,483
10.12.44.0/24
xetid_internal
30 IPs · 2,076,399
10.12.40.0/24
xetid_internal
46 IPs · 1,239,942
200.55.173.0/24
cuban_external
2 IPs · 1,212,405
10.30.0.0/24
internal_rfc1918
13 IPs · 752,184
10.12.165.0/24
xetid_internal
41 IPs · 733,869
10.12.29.0/24
xetid_internal
90 IPs · 627,846
10.12.171.0/24
xetid_internal
2 IPs · 584,916
10.30.118.0/24
internal_rfc1918
12 IPs · 402,231
STATE DB / SSH INFRASTRUCTURE (metadata only — no credentials)
[postgres]
Genesig.BD9.xetid:5432 · db=Genesig_2.0_guantanamo · u=ing
[other]
Git.BD.xetid · db=git · u=zeolides
[winscp]
10.12.0.11 · u=root
[winscp]
10.12.151.30 · u=server
[winscp]
10.12.151.31 · u=server
[winscp]
10.12.151.32 · u=server
[winscp]
10.12.151.36 · u=server
[winscp]
10.12.151.47 · u=%EF%BB%BFpe%C3%B1a
[winscp]
10.12.151.67:9010 · u=administrador
[winscp]
10.12.151.67:9011 · u=adminxutil
[winscp]
10.12.151.67:9012 · u=administrador
[winscp]
10.12.151.67:9014 · u=administrador
[winscp]
10.12.151.67:9015 · u=adminxutil
[winscp]
10.12.151.67:9016 · u=adminxutil
[winscp]
10.12.170.117 · u=root
[winscp]
10.12.170.125 · u=root
[winscp]
10.12.170.136 · u=root
[winscp]
10.12.170.23 · u=root
[winscp]
10.12.170.70 · u=root
[winscp]
10.12.174.210 · u=root
[winscp]
10.30.0.20 · u=adminxutil
[winscp]
10.30.0.69:2202 · u=administrador
[winscp]
10.50.8.106 · u=root
[winscp]
10.50.8.109 · u=root
[winscp]
10.50.8.123 · u=root
[winscp]
10.50.8.124 · u=root
[winscp]
192.168.56.101 · u=root
[winscp]
192.168.56.101 · u=server
[winscp]
192.168.56.102 · u=server
[winscp]
192.168.56.104 · u=root
[login]
certificados.xetid.cu
· u=nairoviss
[login]
distra-acinox.prod.xetid.cu
· u=administrador
[login]
distra-aseguramientocomercio.prod.xetid.cu
· u=administrador
[login]
distra-cementomariel.prod.xetid.cu
· u=administrador
[login]
distra-dipmariel.prod.xetid.cu
· u=administrador
[login]
distra-divep.prod.xetid.cu
· u=administrador
[login]
distra-sigerh.prod.xetid.cu
· u=adelaida
[login]
distra.encomil.co.cu
· u=logistica1
[login]
distra.soygraf.cu
· u=confin2
[login]
distra.suchel.co.cu
· u=inv
[login]
idp.ecmmariel.cu
· u=kenier
[login]
internet-cd.xetid.cu
· u=ixabella
[login]
internet-sp.xetid.cu
· u=algo
[login]
internet-sp.xetid.cu
· u=algo
[login]
internet-sp.xetid.cu
· u=ixabella
[login]
internet-sp.xetid.cu
· u=ygonzaleza
[login]
sp-gespro.prod.xetid.cu
· u=algo
ATTACK-SURFACE / EXPOSURE MAP — Shodan InternetDB (public index, read-only)
1,683 checked · 365 indexed
70 with known CVEs Full detail →
MOST-EXPOSED STATE HOSTS (by CVE count)
No CVE-exposed hosts in this filter.
TOP EXPOSED PORTS
80
256 hosts
443
220 hosts
53
90 hosts
25
68 hosts
22
44 hosts
465
40 hosts
993
40 hosts
2087
40 hosts
2083
39 hosts
2086
37 hosts
2082
36 hosts
587
34 hosts
143
31 hosts
8443
29 hosts
FINGERPRINTED SOFTWARE
f5:nginx
86
apache:http_server
40
postfix:postfix
38
canonical:ubuntu_linux
35
openbsd:openssh:8.2p1
20
linux:linux_kernel
19
cloudflare:cloudflare
19
debian:debian_linux
16
getbootstrap:bootstrap
15
jquery:jquery
13
openresty:openresty:1.31.1.1
13
openresty:lua-nginx-module:1.31.1.1
11
Source: Shodan InternetDB — a public index of internet-facing services. Read-only; CubaIntel never connects to, scans, or exploits any host. Coverage is bounded and reflects what Shodan has indexed, not a complete survey.
HOSTS / DBs (raw_hosts.txt) · 3
⇩ CSV
www.mindus.gob.cu
gobcu
·13297
www.mindus.gob.cu,
other
·2
www.mindus.gob.cud_nmqvh2hyykb9u741ypgt6fnozeak2k2vafpmxsh0u
other
·1
URLS — STATE-AFFILIATED
308 total
⇩ CSVwww.mindus.gob.cu/
https · gobcu_web · 1984 hits
www.mindus.gob.cu/sitemap.xml
https · gobcu_web · 992 hits
www.mindus.gob.cu/es
https · gobcu_web · 944 hits
www.mindus.gob.cu/es/admin/coffee/get-data
https · gobcu_web · 596 hits
www.mindus.gob.cu/en
https · gobcu_web · 382 hits
www.mindus.gob.cu/es/admin/modules/install
https · gobcu_web · 308 hits
www.mindus.gob.cu/es/admin/structure/webform
https · gobcu_web · 301 hits
www.mindus.gob.cu/es/admin/modules
https · gobcu_web · 233 hits
www.mindus.gob.cu/sites/default/files/Imagenes/Portada/Banner.jpg
https · gobcu_web · 200 hits
www.mindus.gob.cu/es/noticias
https · gobcu_web · 175 hits
www.mindus.gob.cu/
https · gobcu_web · 174 hits
www.mindus.gob.cu/es/admin/structure/webform/manage/equipos_de_recreacion
https · gobcu_web · 147 hits
www.mindus.gob.cu/es/admin/reports/status
https · gobcu_web · 132 hits
www.mindus.gob.cu/es/admin/structure/webform/config
https · gobcu_web · 131 hits
www.mindus.gob.cu/autologout_ajax_get_time_left
https · gobcu_web · 130 hits
www.mindus.gob.cu/es/admin/config/regional/translate
https · gobcu_web · 130 hits
www.mindus.gob.cu/es/node/1200
https · gobcu_web · 121 hits
www.mindus.gob.cu/es/admin/structure/webform/manage/conctactenos
https · gobcu_web · 119 hits
www.mindus.gob.cu/es/quickedit/attachments
https · gobcu_web · 117 hits
www.mindus.gob.cu/es/admin/reports/dblog
https · gobcu_web · 112 hits
www.mindus.gob.cu/es/quejas-reclamaciones
https · gobcu_web · 111 hits
www.mindus.gob.cu/es/admin/structure/webform/manage/formulario_de_
https · gobcu_web · 108 hits
www.mindus.gob.cu/es/logo.png
https · gobcu_web · 104 hits
www.mindus.gob.cu/es/en
https · gobcu_web · 102 hits
www.mindus.gob.cu/es/es
https · gobcu_web · 102 hits
www.mindus.gob.cu/es/admin/config/people/captcha/captcha-points
https · gobcu_web · 99 hits
www.mindus.gob.cu/es/node/378
https · gobcu_web · 84 hits
www.mindus.gob.cu/es/batch
https · gobcu_web · 83 hits
www.mindus.gob.cu/es/batch
https · gobcu_web · 83 hits
www.mindus.gob.cu/es/node/1193
https · gobcu_web · 76 hits
www.mindus.gob.cu/es/node/1069
https · gobcu_web · 73 hits
www.mindus.gob.cu/es/node/1102
https · gobcu_web · 73 hits
www.mindus.gob.cu/es/node/1177
https · gobcu_web · 73 hits
www.mindus.gob.cu/es/node/20
https · gobcu_web · 73 hits
www.mindus.gob.cu/es/node/319
https · gobcu_web · 73 hits
www.mindus.gob.cu/es/node/374
https · gobcu_web · 73 hits
www.mindus.gob.cu/es/node/560
https · gobcu_web · 73 hits
www.mindus.gob.cu/es/node/740
https · gobcu_web · 73 hits
www.mindus.gob.cu/es/node/808
https · gobcu_web · 73 hits
www.mindus.gob.cu/es/node/896
https · gobcu_web · 73 hits
www.mindus.gob.cu/es/admin/config/people/captcha
https · gobcu_web · 72 hits
www.mindus.gob.cu/favicon.ico
https · gobcu_web · 72 hits
www.mindus.gob.cu/
https · gobcu_web · 71 hits
www.mindus.gob.cu/en/node/980
https · gobcu_web · 67 hits
www.mindus.gob.cu/en/logo.png
https · gobcu_web · 64 hits
www.mindus.gob.cu/en/node/1014
https · gobcu_web · 64 hits
www.mindus.gob.cu/en/node/1145
https · gobcu_web · 64 hits
www.mindus.gob.cu/en/node/323
https · gobcu_web · 64 hits
www.mindus.gob.cu/en/node/373
https · gobcu_web · 64 hits
www.mindus.gob.cu/en/node/437
https · gobcu_web · 64 hits
1 / 7
Next →
