🌐 State IT Infrastructure — LEAKS Intel
· Cuban gov hosts + URLs + IP subnets · linked to state mailboxes
STATE URLS
10,110
100% of all URLs
URL HITS (cumulative)
837,961
UNIQUE STATE HOSTS
20+
17 internal /24 subnets
TOP STATE HOSTS — by URL hits
| Host | URLs | Total hits | Mailbox? |
|---|---|---|---|
| 10.12.163.35 | 63 | 444,615 | — |
| bienestar-vhabitat.xutil.cu | 8242 | 171,778 | — |
| 10.12.163.40 | 43 | 77,025 | — |
| 10.12.163.46 | 82 | 61,424 | — |
| facturacion.prod.xetid.cu | 60 | 29,182 | — |
| www.mindus.gob.cu | 306 | 13,235 | — |
| facturacion.xetid.cu | 33 | 12,044 | — |
| 10.12.163.44 | 19 | 9,254 | — |
| melfi.prod.xetid.cu | 27 | 7,035 | — |
| 10.12.163.36 | 12 | 4,807 | — |
| bienestar-palacio.presidencia.gob.cu | 602 | 2,024 | — |
| bienestar-vhabitat.prod.xetid.cu | 170 | 876 | — |
| trd.xetid.cu | 11 | 402 | — |
| www.xetid.cu | 3 | 323 | — |
| www.cubadebate.cu | 28 | 288 | — |
| bienestar-lisa.prod.xetid.cu | 35 | 214 | — |
| distra-cf.prod.xetid.cu | 13 | 188 | — |
| xetidshop.local | 93 | 172 | — |
| git-ausa.xetid.cu | 2 | 164 | — |
| mesaredonda.cubadebate.cu | 3 | 127 | — |
INTERNAL SUBNETS /24
10.12.163.0/24
597,134 hits
10.12.170.0/24
82 hits
10.12.29.0/24
68 hits
10.12.38.0/24
29 hits
10.12.35.0/24
17 hits
10.12.173.0/24
16 hits
10.12.167.0/24
11 hits
10.12.45.0/24
10 hits
10.12.46.0/24
8 hits
10.12.34.0/24
4 hits
10.12.171.0/24
2 hits
10.12.3.0/24
2 hits
10.12.47.0/24
2 hits
192.168.0.0/24
2 hits
10.12.161.0/24
1 hits
10.12.174.0/24
1 hits
192.168.223.0/24
1 hits
🔓 LEAKED INTERNAL HOSTS — 109 named in the regime's own leaked docs · 28 corroborated live
TOP STATE IPs — by mentions
10.12.163.35
xetid_internal
106,868,950
10.12.163.46
xetid_internal
19,165,956
10.12.163.40
xetid_internal
18,318,056
10.12.46.38
xetid_internal
9,622,262
10.12.45.38
xetid_internal
6,493,084
10.12.45.8
xetid_internal
6,336,070
10.12.45.9
xetid_internal
2,910,188
10.12.45.23
xetid_internal
2,509,906
10.12.45.3
xetid_internal
2,388,394
10.12.163.44
xetid_internal
2,258,464
10.12.163.30
xetid_internal
2,050,210
10.12.46.93
xetid_internal
1,912,838
10.12.46.37
xetid_internal
1,877,702
10.12.163.27
xetid_internal
1,727,764
10.12.24.113
xetid_internal
1,625,162
10.12.46.9
xetid_internal
1,592,710
10.12.46.3
xetid_internal
1,362,252
10.12.45.39
xetid_internal
1,292,590
10.12.46.23
xetid_internal
1,252,940
200.55.173.218
cuban_external
1,201,944
10.12.163.36
xetid_internal
1,179,374
10.12.45.169
xetid_internal
1,120,936
10.12.24.202
xetid_internal
1,005,036
10.12.45.19
xetid_internal
927,566
10.12.46.147
xetid_internal
869,982
TOP STATE /24 SUBNETS
10.12.163.0/24
xetid_internal
144 IPs · 154,777,378
10.12.45.0/24
xetid_internal
49 IPs · 29,677,284
10.12.46.0/24
xetid_internal
90 IPs · 26,695,376
10.12.24.0/24
xetid_internal
18 IPs · 3,853,834
10.12.44.0/24
xetid_internal
30 IPs · 2,059,386
10.12.40.0/24
xetid_internal
46 IPs · 1,229,680
200.55.173.0/24
cuban_external
2 IPs · 1,202,546
10.30.0.0/24
internal_rfc1918
13 IPs · 746,040
10.12.165.0/24
xetid_internal
41 IPs · 727,854
10.12.29.0/24
xetid_internal
90 IPs · 622,556
10.12.171.0/24
xetid_internal
2 IPs · 580,160
10.30.118.0/24
internal_rfc1918
12 IPs · 398,914
STATE DB / SSH INFRASTRUCTURE (metadata only — no credentials)
[postgres]
Genesig.BD9.xetid:5432 · db=Genesig_2.0_guantanamo · u=ing
[other]
Git.BD.xetid · db=git · u=zeolides
[winscp]
10.12.0.11 · u=root
[winscp]
10.12.151.30 · u=server
[winscp]
10.12.151.31 · u=server
[winscp]
10.12.151.32 · u=server
[winscp]
10.12.151.36 · u=server
[winscp]
10.12.151.47 · u=%EF%BB%BFpe%C3%B1a
[winscp]
10.12.151.67:9010 · u=administrador
[winscp]
10.12.151.67:9011 · u=adminxutil
[winscp]
10.12.151.67:9012 · u=administrador
[winscp]
10.12.151.67:9014 · u=administrador
[winscp]
10.12.151.67:9015 · u=adminxutil
[winscp]
10.12.151.67:9016 · u=adminxutil
[winscp]
10.12.170.117 · u=root
[winscp]
10.12.170.125 · u=root
[winscp]
10.12.170.136 · u=root
[winscp]
10.12.170.23 · u=root
[winscp]
10.12.170.70 · u=root
[winscp]
10.12.174.210 · u=root
[winscp]
10.30.0.20 · u=adminxutil
[winscp]
10.30.0.69:2202 · u=administrador
[winscp]
10.50.8.106 · u=root
[winscp]
10.50.8.109 · u=root
[winscp]
10.50.8.123 · u=root
[winscp]
10.50.8.124 · u=root
[winscp]
192.168.56.101 · u=root
[winscp]
192.168.56.101 · u=server
[winscp]
192.168.56.102 · u=server
[winscp]
192.168.56.104 · u=root
[login]
certificados.xetid.cu
· u=nairoviss
[login]
distra-acinox.prod.xetid.cu
· u=administrador
[login]
distra-aseguramientocomercio.prod.xetid.cu
· u=administrador
[login]
distra-cementomariel.prod.xetid.cu
· u=administrador
[login]
distra-dipmariel.prod.xetid.cu
· u=administrador
[login]
distra-divep.prod.xetid.cu
· u=administrador
[login]
distra-sigerh.prod.xetid.cu
· u=adelaida
[login]
distra.encomil.co.cu
· u=logistica1
[login]
distra.soygraf.cu
· u=confin2
[login]
distra.suchel.co.cu
· u=inv
[login]
idp.ecmmariel.cu
· u=kenier
[login]
internet-cd.xetid.cu
· u=ixabella
[login]
internet-sp.xetid.cu
· u=algo
[login]
internet-sp.xetid.cu
· u=algo
[login]
internet-sp.xetid.cu
· u=ixabella
[login]
internet-sp.xetid.cu
· u=ygonzaleza
[login]
sp-gespro.prod.xetid.cu
· u=algo
ATTACK-SURFACE / EXPOSURE MAP — Shodan InternetDB (public index, read-only)
1,683 checked · 365 indexed
70 with known CVEs Full detail →
MOST-EXPOSED STATE HOSTS (by CVE count)
190.9.130.90
190.9-130-90.static.cantv.net 373 CVE
CVE-2015-3429 CVE-2021-44223 CVE-2016-6289 CVE-2019-17670 CVE-2016-7130 CVE-2016-5771
201.249.52.22
intranet.insalud.gob.ve, roraima.insalud.gob.ve 332 CVE
CVE-2026-7262 CVE-2026-34032 CVE-2026-35414 CVE-2026-7259 CVE-2026-42536 CVE-2013-2765
152.206.201.89
srv89201-206152.vps.etecsa.cu, webmail.countigo.cu 206 CVE
CVE-2024-33661 CVE-2019-2791 CVE-2024-33662 CVE-2019-2946 CVE-2019-2486 CVE-2019-2774
181.225.235.176
miempresa.etecsa.cu 193 CVE
CVE-2019-10092 CVE-2026-28387 CVE-2009-2299 CVE-2026-22795 CVE-2022-4304 CVE-2021-3711
181.225.233.4
168 CVE
CVE-2016-8612 CVE-2025-68160 CVE-2026-45447 CVE-2013-4365 CVE-2024-38477 CVE-2024-38476
190.92.127.20
en.escambray.cu, bohemia.cu 152 CVE
CVE-2016-8612 CVE-2013-4365 CVE-2024-38477 CVE-2024-38476 CVE-2026-42535 CVE-2021-32791
201.249.66.174
201-249-66-174-bto-00.rai.cantv.net, indet.sytes.net 138 CVE
CVE-2026-49975 CVE-2025-49812 CVE-2018-1303 CVE-2026-29170 CVE-2013-0942 CVE-2026-29168
190.9.130.168
190.9-130-168.static.cantv.net 132 CVE
CVE-2025-49812 CVE-2018-1303 CVE-2026-29170 CVE-2013-0942 CVE-2026-93546 CVE-2026-24072
190.205.40.74
190.205.40.74-bto-00.rai.cantv.net 127 CVE
CVE-2026-49975 CVE-2025-49812 CVE-2026-29170 CVE-2013-0942 CVE-2026-29168 CVE-2026-93546
200.44.12.110
200-44-12-110.cnt-02.rai.cantv.net, nube.conatel.gob.ve 126 CVE
CVE-2025-49812 CVE-2018-1303 CVE-2026-29170 CVE-2012-4558 CVE-2013-0942 CVE-2017-16642
201.248.68.116
201-248-67-116.cnt-02.rai.cantv.net, inn.gob.ve 123 CVE
CVE-2026-42536 CVE-2020-13938 CVE-2026-58415 CVE-2026-63718 CVE-2026-5950 CVE-2021-30641
201.248.68.117
innqr.inn.gob.ve, 201-248-67-117.cnt-02.rai.cantv.net 118 CVE
CVE-2026-42536 CVE-2020-13938 CVE-2026-58415 CVE-2026-63718 CVE-2021-30641 CVE-2007-4723
152.206.177.165
srv165177-206152.vps.etecsa.cu 117 CVE
CVE-2009-2299 CVE-2026-59797 CVE-2026-63686 CVE-2021-44224 CVE-2022-28614 CVE-2011-1176
190.202.26.12
190-202-26-12.chc-00.rai.cantv.net 109 CVE
CVE-2019-10092 CVE-2009-2299 CVE-2021-44224 CVE-2022-28614 CVE-2011-1176 CVE-2020-13938
152.206.3.53
vlired.cu, correo.uclv.edu.cu 101 CVE
CVE-2026-44631 CVE-2026-42536 CVE-2026-33007 CVE-2024-38473 CVE-2024-43394 CVE-2021-44790
152.206.201.15
srv15201-206152.vps.etecsa.cu 99 CVE
CVE-2009-2299 CVE-2021-44224 CVE-2022-28614 CVE-2011-1176 CVE-2020-13938 CVE-2024-39573
190.202.150.77
190-202-150-77-chc-00.rai.cantv.net, www.fona.gob.ve 99 CVE
CVE-2026-49975 CVE-2025-49812 CVE-2026-29170 CVE-2013-0942 CVE-2026-29168 CVE-2026-24072
166.1.68.179
www.fondoefa.gob.ve, fondoefa.gob.ve 94 CVE
CVE-2026-42536 CVE-2026-58415 CVE-2026-63718 CVE-2007-4723 CVE-2026-33007 CVE-2026-29169
161.196.43.73
cantv.com.ve, www.cantv.com.ve 91 CVE
CVE-2011-3857 CVE-2009-2396 CVE-2012-1205 CVE-2010-2924 CVE-2011-3864 CVE-2011-3853
8.242.232.210
pagos.alcaldiachacao.net 86 CVE
CVE-2026-24072 CVE-2026-63075 CVE-2026-34032 CVE-2026-31790 CVE-2026-42536 CVE-2013-0942
TOP EXPOSED PORTS
80
256 hosts
443
220 hosts
53
90 hosts
25
68 hosts
22
44 hosts
465
40 hosts
993
40 hosts
2087
40 hosts
2083
39 hosts
2086
37 hosts
2082
36 hosts
587
34 hosts
143
31 hosts
8443
29 hosts
FINGERPRINTED SOFTWARE
f5:nginx
86
apache:http_server
40
postfix:postfix
38
canonical:ubuntu_linux
35
openbsd:openssh:8.2p1
20
linux:linux_kernel
19
cloudflare:cloudflare
19
debian:debian_linux
16
getbootstrap:bootstrap
15
jquery:jquery
13
openresty:openresty:1.31.1.1
13
openresty:lua-nginx-module:1.31.1.1
11
Source: Shodan InternetDB — a public index of internet-facing services. Read-only; CubaIntel never connects to, scans, or exploits any host. Coverage is bounded and reflects what Shodan has indexed, not a complete survey.
HOSTS / DBs (raw_hosts.txt) · 3,711
⇩ CSV
guantanamo.gob.cu
gobcu
·62
misiones.minrex.gob.cu
gobcu
·62
correo.citmacam.gob.cu
gobcu
·62
www.contraloria.gob.cu
gobcu
·62
abreus.gob.cu
gobcu
·62
owncloud.grm.hidro.gob.cu
gobcu
·62
ftp.onat.gob.cu
gobcu
·62
gestordocumental.apppmy.gob.cu
gobcu
·62
www.centrohabana.gob.cu
gobcu
·62
bueyarriba.gob.cu
gobcu
·62
www.marianao.gob.cu
gobcu
·62
banes.gob.cu
gobcu
·62
webmail.goblh.gob.cu
gobcu
·62
autodiscover.inass.gob.cu
gobcu
·62
www.misantaclara.gob.cu
gobcu
·62
videoconf.minrex.gob.cu
gobcu
·62
monitoreo.tsp.gob.cu
gobcu
·62
artemisa.gob.cu
gobcu
·62
mail.goblh.gob.cu
gobcu
·62
www.grm.hidro.gob.cu
gobcu
·62
www.preger.mitrans.gob.cu
gobcu
·62
jabber.onat.gob.cu
gobcu
·62
www.taguasco.gob.cu
gobcu
·62
onfet.mitrans.gob.cu
gobcu
·62
www.bc.gob.cu
gobcu
·62
somosencrucijada.gob.cu
gobcu
·62
proxycentos.tsp.gob.cu
gobcu
·62
www.somosencrucijada.gob.cu
gobcu
·62
www.camaguey.gob.cu
gobcu
·62
bienestarapp.minjus.gob.cu
gobcu
·62
cas.mincex.gob.cu
gobcu
·62
trinidad.gob.cu
gobcu
·62
www.cienfuegos.gob.cu
gobcu
·62
www.palmira.gob.cu
gobcu
·62
www.songolamaya.gob.cu
gobcu
·62
smtp.inass.gob.cu
gobcu
·62
www.citmamatanzas.gob.cu
gobcu
·62
lahabana.gob.cu
gobcu
·62
www.chaparra.gob.cu
gobcu
·62
onat-root.onat.gob.cu
gobcu
·62
mincult.gob.cu
gobcu
·62
www.ahs.cu
state_web
·62
playa.gob.cu
gobcu
·62
cuadro-mando.hidro.gob.cu
gobcu
·62
taguasco.gob.cu
gobcu
·62
webmail.grm.hidro.gob.cu
gobcu
·62
correo.stg.hidro.gob.cu
gobcu
·62
onat-meet.onat.gob.cu
gobcu
·62
www.saguadetanamo.gob.cu
gobcu
·62
www.tunabrava.gob.cu
gobcu
·62
camaguey.gob.cu
gobcu
·62
jabber.inder.gob.cu
gobcu
·62
www.habanavieja.gob.cu
gobcu
·62
boyeros.gob.cu
gobcu
·62
mayari.gob.cu
gobcu
·62
ods.mep.gob.cu
gobcu
·62
www.caimanera.gob.cu
gobcu
·62
www.manati.gob.cu
gobcu
·62
otro.mined.gob.cu
gobcu
·62
plaza.gob.cu
gobcu
·62
foroempresarial.mincex.gob.cu
gobcu
·62
somosmanicaragua.gob.cu
gobcu
·62
www.espirituano.gob.cu
gobcu
·62
aguadadepasajeros.gob.cu
gobcu
·62
www.redpinar.gob.cu
gobcu
·62
santiago.gob.cu
gobcu
·62
correo.micons.gob.cu
gobcu
·62
correo.ij.hidro.gob.cu
gobcu
·62
inrmail.inass.gob.cu
gobcu
·62
webmail.inder.gob.cu
gobcu
·62
lastunas.gob.cu
gobcu
·62
saguadetanamo.gob.cu
gobcu
·62
blue-meet1.onat.gob.cu
gobcu
·62
cotorro.gob.cu
gobcu
·62
www.lasierpe.gob.cu
gobcu
·62
certificaciones.minjus.gob.cu
gobcu
·62
www.cerro.gob.cu
gobcu
·62
lalisa.gob.cu
gobcu
·62
www.cienfueguero.gob.cu
gobcu
·62
ftp.hidro.gob.cu
gobcu
·62
manati.gob.cu
gobcu
·62
granma.minjus.gob.cu
gobcu
·62
www.micons.gob.cu
gobcu
·62
sgia.hidro.gob.cu
gobcu
·62
ciegodeavila.gob.cu
gobcu
·62
portuspatris.gob.cu
gobcu
·62
chat.hidro.gob.cu
gobcu
·62
espirituano.gob.cu
gobcu
·62
segundofrente.gob.cu
gobcu
·62
www.jatibonico.gob.cu
gobcu
·62
palmira.gob.cu
gobcu
·62
www.yayabo.gob.cu
gobcu
·62
www.hidro.gob.cu
gobcu
·62
www.habana500.gob.cu
gobcu
·62
webmail.apppmy.gob.cu
gobcu
·62
www.mayaweb.gob.cu
gobcu
·62
miguantanamo.gob.cu
gobcu
·62
civix-portal.tsp.gob.cu
gobcu
·62
www.500.ch.gob.cu
gobcu
·62
f.cert.rsa.icrt.cu
state_web
·62
URLS — STATE-AFFILIATED
10,110 total
⇩ CSV10.12.163.35/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · internal_ip_app · 256852 hits
10.12.163.35/logistica/inventario/entrada/entrada/index.php/apertura/gestapertura
http · internal_ip_app · 108792 hits
bienestar-vhabitat.xutil.cu/sysvivienda_habitat/es-ES/xetid/tracker/login
https · gobcu_web · 77642 hits
10.12.163.40/logistica/farmacia/farmacia/index.php/tarjetamedicamento/tarjetamedicamento
http · internal_ip_app · 32959 hits
10.12.163.46/logistica/facturacion/facturacion/factura/index.php/gestionarfactura/gestionarfactura
http · internal_ip_app · 26135 hits
10.12.163.40/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · internal_ip_app · 21081 hits
10.12.163.35/logistica/inventario/movimiento/index.php/transferenciainterna/transferenciainterna
http · internal_ip_app · 16283 hits
10.12.163.35/logistica/inventario/operaciones/index.php/calcularmaxmin/calcularmaxmin
http · internal_ip_app · 12465 hits
10.12.163.40/portal/index.php/portal/portal
http · internal_ip_app · 11453 hits
10.12.163.35/logistica/utiles/nomencladores/index.php/nomencladores/nomencladores
http · internal_ip_app · 11274 hits
10.12.163.35/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · internal_ip_app · 11189 hits
10.12.163.35/portal/index.php/portal/portal
http · internal_ip_app · 8739 hits
facturacion.prod.xetid.cu/seguridad/index.php/gestsist/gestsist
http · xetid_web · 6801 hits
10.12.163.44/logistica/farmacia/farmacia/index.php/reenvase/reenvase
http · internal_ip_app · 6502 hits
10.12.163.46/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 5978 hits
10.12.163.46/logistica/facturacion/facturacion/factura/index.php/gestionarfactura/gestionarfactura
http · internal_ip_app · 5699 hits
facturacion.prod.xetid.cu/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · xetid_web · 5346 hits
facturacion.prod.xetid.cu/logistica/facturacion/facturacion/factura/index.php/gestionarfactura/gestionarfactura
http · xetid_web · 5173 hits
10.12.163.46/portal/index.php/portal/portal
http · internal_ip_app · 4644 hits
10.12.163.35/portal/
http · internal_ip_app · 4379 hits
facturacion.xetid.cu/logistica/facturacion/facturacion/factura/index.php/gestionarfactura/gestionarfactura
http · xetid_web · 3859 hits
10.12.163.46/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · internal_ip_app · 3397 hits
10.12.163.35/logistica/inventario/entrada/entrada/index.php/recepcion/gestrecepcion
http · internal_ip_app · 3384 hits
10.12.163.36/logistica/inventario/operaciones/index.php/rotacionlote/rotacionlote
http · internal_ip_app · 3085 hits
facturacion.prod.xetid.cu/portal/index.php/portal/portal
http · xetid_web · 2890 hits
10.12.163.40/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · internal_ip_app · 2641 hits
10.12.163.40/portal/
http · internal_ip_app · 2571 hits
melfi.prod.xetid.cu/logistica/transmaritima/buqueo/index.php/buqueo/index
http · xetid_web · 2337 hits
facturacion.xetid.cu/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · xetid_web · 2051 hits
www.mindus.gob.cu/
https · gobcu_web · 1984 hits
10.12.163.35/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 1957 hits
facturacion.xetid.cu/portal/index.php/portal/portal
http · xetid_web · 1632 hits
bienestar-vhabitat.xutil.cu/sysvivienda_habitat/es-ES/neoclassic/tracker/login
https · gobcu_web · 1566 hits
10.12.163.40/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 1458 hits
10.12.163.40/logistica/utiles/nomencladores/index.php/nomencladores/nomencladores
http · internal_ip_app · 1389 hits
10.12.163.46/portal/index.php/portal/portal
http · internal_ip_app · 1382 hits
10.12.163.35/logistica/inventario/movimiento/index.php/ajuste/ajuste
http · internal_ip_app · 1371 hits
10.12.163.46/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · internal_ip_app · 1354 hits
facturacion.prod.xetid.cu/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · xetid_web · 1274 hits
melfi.prod.xetid.cu/portal/index.php/portal/portal
http · xetid_web · 1266 hits
10.12.163.46/contabilidad/contabilidad_financiera/comprobante_operaciones/index.php/registrodecomprobantes/registrodecomprobantes
http · internal_ip_app · 1239 hits
facturacion.xetid.cu/seguridad/index.php/gestsist/gestsist
http · xetid_web · 1227 hits
10.12.163.35/seguridad/index.php/configaccesos/configaccesos
http · internal_ip_app · 1190 hits
10.12.163.46/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 1160 hits
10.12.163.46/seguridad/index.php/configaccesos/configaccesos
http · internal_ip_app · 1134 hits
facturacion.prod.xetid.cu/seguridad/index.php/gestsist/gestsist
http · xetid_web · 1117 hits
10.12.163.44/portal/index.php/portal/portal
http · internal_ip_app · 1113 hits
www.mindus.gob.cu/sitemap.xml
https · gobcu_web · 992 hits
facturacion.prod.xetid.cu/portal/
http · xetid_web · 976 hits
www.mindus.gob.cu/es
https · gobcu_web · 944 hits
1 / 203
Next →
