🌐 State IT Infrastructure — LEAKS Intel
· Cuban gov hosts + URLs + IP subnets · linked to state mailboxes
STATE URLS
10,110
100% of all URLs
URL HITS (cumulative)
837,961
UNIQUE STATE HOSTS
20+
17 internal /24 subnets
TOP STATE HOSTS — by URL hits
| Host | URLs | Total hits | Mailbox? |
|---|---|---|---|
| 10.12.163.35 | 63 | 444,615 | — |
| bienestar-vhabitat.xutil.cu | 8242 | 171,778 | — |
| 10.12.163.40 | 43 | 77,025 | — |
| 10.12.163.46 | 82 | 61,424 | — |
| facturacion.prod.xetid.cu | 60 | 29,182 | — |
| www.mindus.gob.cu | 306 | 13,235 | — |
| facturacion.xetid.cu | 33 | 12,044 | — |
| 10.12.163.44 | 19 | 9,254 | — |
| melfi.prod.xetid.cu | 27 | 7,035 | — |
| 10.12.163.36 | 12 | 4,807 | — |
| bienestar-palacio.presidencia.gob.cu | 602 | 2,024 | — |
| bienestar-vhabitat.prod.xetid.cu | 170 | 876 | — |
| trd.xetid.cu | 11 | 402 | — |
| www.xetid.cu | 3 | 323 | — |
| www.cubadebate.cu | 28 | 288 | — |
| bienestar-lisa.prod.xetid.cu | 35 | 214 | — |
| distra-cf.prod.xetid.cu | 13 | 188 | — |
| xetidshop.local | 93 | 172 | — |
| git-ausa.xetid.cu | 2 | 164 | — |
| mesaredonda.cubadebate.cu | 3 | 127 | — |
INTERNAL SUBNETS /24
10.12.163.0/24
597,134 hits
10.12.170.0/24
82 hits
10.12.29.0/24
68 hits
10.12.38.0/24
29 hits
10.12.35.0/24
17 hits
10.12.173.0/24
16 hits
10.12.167.0/24
11 hits
10.12.45.0/24
10 hits
10.12.46.0/24
8 hits
10.12.34.0/24
4 hits
10.12.171.0/24
2 hits
10.12.3.0/24
2 hits
10.12.47.0/24
2 hits
192.168.0.0/24
2 hits
10.12.161.0/24
1 hits
10.12.174.0/24
1 hits
192.168.223.0/24
1 hits
🔓 LEAKED INTERNAL HOSTS — 109 named in the regime's own leaked docs · 28 corroborated live
TOP STATE IPs — by mentions
10.12.163.35
xetid_internal
107,744,925
10.12.163.46
xetid_internal
19,323,054
10.12.163.40
xetid_internal
18,468,204
10.12.46.38
xetid_internal
9,701,133
10.12.45.38
xetid_internal
6,546,306
10.12.45.8
xetid_internal
6,388,005
10.12.45.9
xetid_internal
2,934,042
10.12.45.23
xetid_internal
2,530,479
10.12.45.3
xetid_internal
2,407,971
10.12.163.44
xetid_internal
2,276,976
10.12.163.30
xetid_internal
2,067,015
10.12.46.93
xetid_internal
1,928,517
10.12.46.37
xetid_internal
1,893,093
10.12.163.27
xetid_internal
1,741,926
10.12.24.113
xetid_internal
1,638,483
10.12.46.9
xetid_internal
1,605,765
10.12.46.3
xetid_internal
1,373,418
10.12.45.39
xetid_internal
1,303,185
10.12.46.23
xetid_internal
1,263,210
200.55.173.218
cuban_external
1,211,796
10.12.163.36
xetid_internal
1,189,041
10.12.45.169
xetid_internal
1,130,124
10.12.24.202
xetid_internal
1,013,274
10.12.45.19
xetid_internal
935,169
10.12.46.147
xetid_internal
877,113
TOP STATE /24 SUBNETS
10.12.163.0/24
xetid_internal
144 IPs · 156,046,215
10.12.45.0/24
xetid_internal
49 IPs · 29,920,644
10.12.46.0/24
xetid_internal
90 IPs · 26,914,488
10.12.24.0/24
xetid_internal
18 IPs · 3,885,483
10.12.44.0/24
xetid_internal
30 IPs · 2,076,399
10.12.40.0/24
xetid_internal
46 IPs · 1,239,942
200.55.173.0/24
cuban_external
2 IPs · 1,212,405
10.30.0.0/24
internal_rfc1918
13 IPs · 752,184
10.12.165.0/24
xetid_internal
41 IPs · 733,869
10.12.29.0/24
xetid_internal
90 IPs · 627,846
10.12.171.0/24
xetid_internal
2 IPs · 584,916
10.30.118.0/24
internal_rfc1918
12 IPs · 402,231
STATE DB / SSH INFRASTRUCTURE (metadata only — no credentials)
[postgres]
Genesig.BD9.xetid:5432 · db=Genesig_2.0_guantanamo · u=ing
[other]
Git.BD.xetid · db=git · u=zeolides
[winscp]
10.12.0.11 · u=root
[winscp]
10.12.151.30 · u=server
[winscp]
10.12.151.31 · u=server
[winscp]
10.12.151.32 · u=server
[winscp]
10.12.151.36 · u=server
[winscp]
10.12.151.47 · u=%EF%BB%BFpe%C3%B1a
[winscp]
10.12.151.67:9010 · u=administrador
[winscp]
10.12.151.67:9011 · u=adminxutil
[winscp]
10.12.151.67:9012 · u=administrador
[winscp]
10.12.151.67:9014 · u=administrador
[winscp]
10.12.151.67:9015 · u=adminxutil
[winscp]
10.12.151.67:9016 · u=adminxutil
[winscp]
10.12.170.117 · u=root
[winscp]
10.12.170.125 · u=root
[winscp]
10.12.170.136 · u=root
[winscp]
10.12.170.23 · u=root
[winscp]
10.12.170.70 · u=root
[winscp]
10.12.174.210 · u=root
[winscp]
10.30.0.20 · u=adminxutil
[winscp]
10.30.0.69:2202 · u=administrador
[winscp]
10.50.8.106 · u=root
[winscp]
10.50.8.109 · u=root
[winscp]
10.50.8.123 · u=root
[winscp]
10.50.8.124 · u=root
[winscp]
192.168.56.101 · u=root
[winscp]
192.168.56.101 · u=server
[winscp]
192.168.56.102 · u=server
[winscp]
192.168.56.104 · u=root
[login]
certificados.xetid.cu
· u=nairoviss
[login]
distra-acinox.prod.xetid.cu
· u=administrador
[login]
distra-aseguramientocomercio.prod.xetid.cu
· u=administrador
[login]
distra-cementomariel.prod.xetid.cu
· u=administrador
[login]
distra-dipmariel.prod.xetid.cu
· u=administrador
[login]
distra-divep.prod.xetid.cu
· u=administrador
[login]
distra-sigerh.prod.xetid.cu
· u=adelaida
[login]
distra.encomil.co.cu
· u=logistica1
[login]
distra.soygraf.cu
· u=confin2
[login]
distra.suchel.co.cu
· u=inv
[login]
idp.ecmmariel.cu
· u=kenier
[login]
internet-cd.xetid.cu
· u=ixabella
[login]
internet-sp.xetid.cu
· u=algo
[login]
internet-sp.xetid.cu
· u=algo
[login]
internet-sp.xetid.cu
· u=ixabella
[login]
internet-sp.xetid.cu
· u=ygonzaleza
[login]
sp-gespro.prod.xetid.cu
· u=algo
ATTACK-SURFACE / EXPOSURE MAP — Shodan InternetDB (public index, read-only)
1,683 checked · 365 indexed
70 with known CVEs Full detail →
MOST-EXPOSED STATE HOSTS (by CVE count)
190.9.130.90
190.9-130-90.static.cantv.net 373 CVE
CVE-2015-3429 CVE-2021-44223 CVE-2016-6289 CVE-2019-17670 CVE-2016-7130 CVE-2016-5771
201.249.52.22
intranet.insalud.gob.ve, roraima.insalud.gob.ve 332 CVE
CVE-2026-7262 CVE-2026-34032 CVE-2026-35414 CVE-2026-7259 CVE-2026-42536 CVE-2013-2765
152.206.201.89
srv89201-206152.vps.etecsa.cu, webmail.countigo.cu 206 CVE
CVE-2024-33661 CVE-2019-2791 CVE-2024-33662 CVE-2019-2946 CVE-2019-2486 CVE-2019-2774
181.225.235.176
miempresa.etecsa.cu 193 CVE
CVE-2019-10092 CVE-2026-28387 CVE-2009-2299 CVE-2026-22795 CVE-2022-4304 CVE-2021-3711
181.225.233.4
168 CVE
CVE-2016-8612 CVE-2025-68160 CVE-2026-45447 CVE-2013-4365 CVE-2024-38477 CVE-2024-38476
190.92.127.20
en.escambray.cu, bohemia.cu 152 CVE
CVE-2016-8612 CVE-2013-4365 CVE-2024-38477 CVE-2024-38476 CVE-2026-42535 CVE-2021-32791
201.249.66.174
201-249-66-174-bto-00.rai.cantv.net, indet.sytes.net 138 CVE
CVE-2026-49975 CVE-2025-49812 CVE-2018-1303 CVE-2026-29170 CVE-2013-0942 CVE-2026-29168
190.9.130.168
190.9-130-168.static.cantv.net 132 CVE
CVE-2025-49812 CVE-2018-1303 CVE-2026-29170 CVE-2013-0942 CVE-2026-93546 CVE-2026-24072
190.205.40.74
190.205.40.74-bto-00.rai.cantv.net 127 CVE
CVE-2026-49975 CVE-2025-49812 CVE-2026-29170 CVE-2013-0942 CVE-2026-29168 CVE-2026-93546
200.44.12.110
200-44-12-110.cnt-02.rai.cantv.net, nube.conatel.gob.ve 126 CVE
CVE-2025-49812 CVE-2018-1303 CVE-2026-29170 CVE-2012-4558 CVE-2013-0942 CVE-2017-16642
201.248.68.116
201-248-67-116.cnt-02.rai.cantv.net, inn.gob.ve 123 CVE
CVE-2026-42536 CVE-2020-13938 CVE-2026-58415 CVE-2026-63718 CVE-2026-5950 CVE-2021-30641
201.248.68.117
innqr.inn.gob.ve, 201-248-67-117.cnt-02.rai.cantv.net 118 CVE
CVE-2026-42536 CVE-2020-13938 CVE-2026-58415 CVE-2026-63718 CVE-2021-30641 CVE-2007-4723
152.206.177.165
srv165177-206152.vps.etecsa.cu 117 CVE
CVE-2009-2299 CVE-2026-59797 CVE-2026-63686 CVE-2021-44224 CVE-2022-28614 CVE-2011-1176
190.202.26.12
190-202-26-12.chc-00.rai.cantv.net 109 CVE
CVE-2019-10092 CVE-2009-2299 CVE-2021-44224 CVE-2022-28614 CVE-2011-1176 CVE-2020-13938
152.206.3.53
vlired.cu, correo.uclv.edu.cu 101 CVE
CVE-2026-44631 CVE-2026-42536 CVE-2026-33007 CVE-2024-38473 CVE-2024-43394 CVE-2021-44790
152.206.201.15
srv15201-206152.vps.etecsa.cu 99 CVE
CVE-2009-2299 CVE-2021-44224 CVE-2022-28614 CVE-2011-1176 CVE-2020-13938 CVE-2024-39573
190.202.150.77
190-202-150-77-chc-00.rai.cantv.net, www.fona.gob.ve 99 CVE
CVE-2026-49975 CVE-2025-49812 CVE-2026-29170 CVE-2013-0942 CVE-2026-29168 CVE-2026-24072
166.1.68.179
www.fondoefa.gob.ve, fondoefa.gob.ve 94 CVE
CVE-2026-42536 CVE-2026-58415 CVE-2026-63718 CVE-2007-4723 CVE-2026-33007 CVE-2026-29169
161.196.43.73
cantv.com.ve, www.cantv.com.ve 91 CVE
CVE-2011-3857 CVE-2009-2396 CVE-2012-1205 CVE-2010-2924 CVE-2011-3864 CVE-2011-3853
8.242.232.210
pagos.alcaldiachacao.net 86 CVE
CVE-2026-24072 CVE-2026-63075 CVE-2026-34032 CVE-2026-31790 CVE-2026-42536 CVE-2013-0942
TOP EXPOSED PORTS
80
256 hosts
443
220 hosts
53
90 hosts
25
68 hosts
22
44 hosts
465
40 hosts
993
40 hosts
2087
40 hosts
2083
39 hosts
2086
37 hosts
2082
36 hosts
587
34 hosts
143
31 hosts
8443
29 hosts
FINGERPRINTED SOFTWARE
f5:nginx
86
apache:http_server
40
postfix:postfix
38
canonical:ubuntu_linux
35
openbsd:openssh:8.2p1
20
linux:linux_kernel
19
cloudflare:cloudflare
19
debian:debian_linux
16
getbootstrap:bootstrap
15
jquery:jquery
13
openresty:openresty:1.31.1.1
13
openresty:lua-nginx-module:1.31.1.1
11
Source: Shodan InternetDB — a public index of internet-facing services. Read-only; CubaIntel never connects to, scans, or exploits any host. Coverage is bounded and reflects what Shodan has indexed, not a complete survey.
HOSTS / DBs (raw_hosts.txt) · 3,711
⇩ CSV
10.12.163.35
xetid_internal
·444615
bienestar-vhabitat.xutil.cu
state_web
·171778
10.12.163.40
xetid_internal
·77025
10.12.163.46
xetid_internal
·61424
facturacion.prod.xetid.cu
xetid_internal
·29182
www.mindus.gob.cu
gobcu
·13297
facturacion.xetid.cu
xetid_internal
·12044
10.12.163.44
xetid_internal
·9254
melfi.prod.xetid.cu
xetid_internal
·7035
10.12.163.36
xetid_internal
·4807
bienestar-palacio.presidencia.gob.cu
gobcu
·2086
bienestar-vhabitat.prod.xetid.cu
xetid_internal
·876
trd.xetid.cu
xetid_internal
·402
www.xetid.cu
xetid_internal
·391
www.cubadebate.cu
state_web
·288
bienestar-lisa.prod.xetid.cu
xetid_internal
·282
www.gacetaoficial.gob.cu
gobcu
·238
distra-cf.prod.xetid.cu
xetid_internal
·188
www.minrex.gob.cu
gobcu
·186
salud.msp.gob.cu
gobcu
·185
www.redcuba.cu
state_web
·174
xetidshop.local
xetid_internal
·172
git-ausa.xetid.cu
xetid_internal
·164
mesaredonda.cubadebate.cu
state_web
·127
teveo.cu
state_web
·125
www.presidencia.gob.cu
gobcu
·124
www.parlamentocubano.cu
state_web
·124
www.fidelcastro.cu
state_web
·124
www.sime.cu
state_web
·123
www.picta.cu
state_web
·123
www.ondi.cu
state_web
·123
www.ligera.cu
state_web
·123
www.gesta.cu
state_web
·123
www.gelect.cu
state_web
·123
www.geiq.cu
state_web
·123
cubarecicla.ger.cu
state_web
·123
5tay42.xetid.cu
xetid_internal
·120
piwik.cimex.com.cu
state_web
·115
emisor.cimex.com.cu
state_web
·115
webmail.cimex.com.cu
state_web
·115
www.minjus.gob.cu
gobcu
·114
minjus.gob.cu
gobcu
·114
gacetaoficial.gob.cu
gobcu
·114
cij.minjus.gob.cu
gobcu
·114
gacetaoficial.cu
state_web
·114
minag.gob.cu
gobcu
·114
Git.BD.xetid
xetid_internal
·114
Genesig.BD.xetid
xetid_internal
·113
www.granma.cu
state_web
·106
Genesig.BD9.xetid
xetid_internal
·102
varbase9.xetid.cu
xetid_internal
·96
it.granma.cu
state_web
·76
granma.cu
state_web
·76
datos.granma.cu
state_web
·76
de.granma.cu
state_web
·76
webmail.granma.cu
state_web
·76
pt.granma.cu
state_web
·76
en.granma.cu
state_web
·76
portal.granma.cu
state_web
·76
www.fr.granma.cu
state_web
·76
www.it.granma.cu
state_web
·76
fr.granma.cu
state_web
·76
www.pt.granma.cu
state_web
·76
www.en.granma.cu
state_web
·76
planteamientos-cmg.prod.xetid.cu
xetid_internal
·70
xetid-analytic.enzona.xetid.cu
xetid_internal
·68
gitlab-goe.prod.xetid.cu
xetid_internal
·68
pkicertificados.xetid.cu
xetid_internal
·68
turn1.voxes.xetid.cu
xetid_internal
·68
pkitsa.xetid.cu
xetid_internal
·68
gitlab-hedexi.prod.xetid.cu
xetid_internal
·68
pkiocsp.xetid.cu
xetid_internal
·68
bienestar-aica.prod.xetid.cu
xetid_internal
·68
voxes.xetid.cu
xetid_internal
·68
apisandbox.enzona.xetid.cu
xetid_internal
·68
pkicrl.xetid.cu
xetid_internal
·68
xetid.cu
xetid_internal
·68
identitysandbox.enzona.xetid.cu
xetid_internal
·68
api.voxes.xetid.cu
xetid_internal
·68
turn2.voxes.xetid.cu
xetid_internal
·68
registry-hedexi.prod.xetid.cu
xetid_internal
·68
util.enzona.xetid.cu
xetid_internal
·68
caracol-xevent.test.xetid.cu
xetid_internal
·68
www.mep.gob.cu
gobcu
·68
10.12.29.191
xetid_internal
·68
www.mincin.gob.cu
gobcu
·65
s3.cimex.com.cu
state_web
·63
docker.cimex.com.cu
state_web
·63
das-ocs05.cimex.com.cu
state_web
·63
cdn.cimex.com.cu
state_web
·63
jabber.cimex.com.cu
state_web
·63
webtarjetas.cimex.com.cu
state_web
·63
cimex.com.cu
state_web
·63
ilog.cimex.com.cu
state_web
·63
jitsi.cimex.com.cu
state_web
·63
www.cubaminrex.cu
state_web
·63
visasonline.cubaminrex.cu
state_web
·63
misiones.cubaminrex.cu
state_web
·63
archivo.cubaminrex.cu
state_web
·63
visas.cubaminrex.cu
state_web
·63
1 / 38
Next →
URLS — STATE-AFFILIATED
9,266 total
⇩ CSVbienestar-vhabitat.xutil.cu/sysvivienda_habitat/es-ES/xetid/tracker/login
https · gobcu_web · 77642 hits
www.mindus.gob.cu/
https · gobcu_web · 1984 hits
bienestar-vhabitat.xutil.cu/sysvivienda_habitat/es-ES/neoclassic/tracker/login
https · gobcu_web · 1566 hits
www.mindus.gob.cu/sitemap.xml
https · gobcu_web · 992 hits
www.mindus.gob.cu/es
https · gobcu_web · 944 hits
www.mindus.gob.cu/es/admin/coffee/get-data
https · gobcu_web · 596 hits
bienestar-palacio.presidencia.gob.cu/syspalacio/es-ES/palacio/4637140895dce014fbf46e3063559010,
https · gobcu_web · 569 hits
bienestar-vhabitat.xutil.cu/sysvivienda_habitat/en/xetid/tracker/login
https · gobcu_web · 408 hits
bienestar-palacio.presidencia.gob.cu/syspalacio/es-ES/palacio/4637140895dce014fbf46e3063559010/palacio
https · gobcu_web · 402 hits
www.mindus.gob.cu/en
https · gobcu_web · 382 hits
www.mindus.gob.cu/es/admin/modules/install
https · gobcu_web · 308 hits
bienestar-vhabitat.xutil.cu/sysvivienda_habitat/en/neoclassic/tracker/login
https · gobcu_web · 304 hits
www.mindus.gob.cu/es/admin/structure/webform
https · gobcu_web · 301 hits
www.mindus.gob.cu/es/admin/modules
https · gobcu_web · 233 hits
www.mindus.gob.cu/sites/default/files/Imagenes/Portada/Banner.jpg
https · gobcu_web · 200 hits
www.mindus.gob.cu/es/noticias
https · gobcu_web · 175 hits
www.mindus.gob.cu/
https · gobcu_web · 174 hits
bienestar-palacio.presidencia.gob.cu/syspalacio/es-ES/palacio/login/login,https://bienestar-palacio.presidencia.gob.cu/syspalacio/es-ES/palacio/5510944355e4553e9a36208023180070/Palacio_Rev.png,https:/
https · gobcu_web · 170 hits
www.mindus.gob.cu/es/admin/structure/webform/manage/equipos_de_recreacion
https · gobcu_web · 147 hits
www.cubadebate.cu/
http · gobcu_web · 146 hits
www.mindus.gob.cu/es/admin/reports/status
https · gobcu_web · 132 hits
www.mindus.gob.cu/es/admin/structure/webform/config
https · gobcu_web · 131 hits
www.mindus.gob.cu/autologout_ajax_get_time_left
https · gobcu_web · 130 hits
www.mindus.gob.cu/es/admin/config/regional/translate
https · gobcu_web · 130 hits
www.fidelcastro.cu/
http · gobcu_web · 124 hits
www.minrex.gob.cu/
http · gobcu_web · 124 hits
www.parlamentocubano.cu/
http · gobcu_web · 124 hits
www.gacetaoficial.gob.cu/
https · gobcu_web · 124 hits
www.presidencia.gob.cu/
https · gobcu_web · 124 hits
cubarecicla.ger.cu/
http · gobcu_web · 123 hits
mesaredonda.cubadebate.cu/
http · gobcu_web · 123 hits
www.geiq.cu/
http · gobcu_web · 123 hits
www.gelect.cu/
http · gobcu_web · 123 hits
www.gesta.cu/
http · gobcu_web · 123 hits
www.ligera.cu/
http · gobcu_web · 123 hits
www.ondi.cu/
http · gobcu_web · 123 hits
salud.msp.gob.cu/
https · gobcu_web · 123 hits
teveo.cu/channel/NNsmjtYjec9T8tHS
https · gobcu_web · 123 hits
www.sime.cu/
https · gobcu_web · 123 hits
www.redcuba.cu/web/webResults/mindus
https · gobcu_web · 122 hits
www.mindus.gob.cu/es/node/1200
https · gobcu_web · 121 hits
www.picta.cu/canal/ministerio-industrias-mindus-2020-03-23-09-29-26-943262
https · gobcu_web · 121 hits
www.mindus.gob.cu/es/admin/structure/webform/manage/conctactenos
https · gobcu_web · 119 hits
www.mindus.gob.cu/es/quickedit/attachments
https · gobcu_web · 117 hits
www.mindus.gob.cu/es/admin/reports/dblog
https · gobcu_web · 112 hits
www.mindus.gob.cu/es/quejas-reclamaciones
https · gobcu_web · 111 hits
www.mindus.gob.cu/es/admin/structure/webform/manage/formulario_de_
https · gobcu_web · 108 hits
www.mindus.gob.cu/es/logo.png
https · gobcu_web · 104 hits
www.mindus.gob.cu/es/en
https · gobcu_web · 102 hits
www.mindus.gob.cu/es/es
https · gobcu_web · 102 hits
1 / 186
Next →
