🌐 State IT Infrastructure — LEAKS Intel
· Cuban gov hosts + URLs + IP subnets · linked to state mailboxes
STATE URLS
10,110
100% of all URLs
URL HITS (cumulative)
837,961
UNIQUE STATE HOSTS
20+
17 internal /24 subnets
TOP STATE HOSTS — by URL hits
| Host | URLs | Total hits | Mailbox? |
|---|---|---|---|
| 10.12.163.35 | 63 | 444,615 | — |
| bienestar-vhabitat.xutil.cu | 8242 | 171,778 | — |
| 10.12.163.40 | 43 | 77,025 | — |
| 10.12.163.46 | 82 | 61,424 | — |
| facturacion.prod.xetid.cu | 60 | 29,182 | — |
| www.mindus.gob.cu | 306 | 13,235 | — |
| facturacion.xetid.cu | 33 | 12,044 | — |
| 10.12.163.44 | 19 | 9,254 | — |
| melfi.prod.xetid.cu | 27 | 7,035 | — |
| 10.12.163.36 | 12 | 4,807 | — |
| bienestar-palacio.presidencia.gob.cu | 602 | 2,024 | — |
| bienestar-vhabitat.prod.xetid.cu | 170 | 876 | — |
| trd.xetid.cu | 11 | 402 | — |
| www.xetid.cu | 3 | 323 | — |
| www.cubadebate.cu | 28 | 288 | — |
| bienestar-lisa.prod.xetid.cu | 35 | 214 | — |
| distra-cf.prod.xetid.cu | 13 | 188 | — |
| xetidshop.local | 93 | 172 | — |
| git-ausa.xetid.cu | 2 | 164 | — |
| mesaredonda.cubadebate.cu | 3 | 127 | — |
INTERNAL SUBNETS /24
10.12.163.0/24
597,134 hits
10.12.170.0/24
82 hits
10.12.29.0/24
68 hits
10.12.38.0/24
29 hits
10.12.35.0/24
17 hits
10.12.173.0/24
16 hits
10.12.167.0/24
11 hits
10.12.45.0/24
10 hits
10.12.46.0/24
8 hits
10.12.34.0/24
4 hits
10.12.171.0/24
2 hits
10.12.3.0/24
2 hits
10.12.47.0/24
2 hits
192.168.0.0/24
2 hits
10.12.161.0/24
1 hits
10.12.174.0/24
1 hits
192.168.223.0/24
1 hits
🔓 LEAKED INTERNAL HOSTS — 109 named in the regime's own leaked docs · 28 corroborated live
TOP STATE IPs — by mentions
10.12.163.35
xetid_internal
106,868,950
10.12.163.46
xetid_internal
19,165,956
10.12.163.40
xetid_internal
18,318,056
10.12.46.38
xetid_internal
9,622,262
10.12.45.38
xetid_internal
6,493,084
10.12.45.8
xetid_internal
6,336,070
10.12.45.9
xetid_internal
2,910,188
10.12.45.23
xetid_internal
2,509,906
10.12.45.3
xetid_internal
2,388,394
10.12.163.44
xetid_internal
2,258,464
10.12.163.30
xetid_internal
2,050,210
10.12.46.93
xetid_internal
1,912,838
10.12.46.37
xetid_internal
1,877,702
10.12.163.27
xetid_internal
1,727,764
10.12.24.113
xetid_internal
1,625,162
10.12.46.9
xetid_internal
1,592,710
10.12.46.3
xetid_internal
1,362,252
10.12.45.39
xetid_internal
1,292,590
10.12.46.23
xetid_internal
1,252,940
200.55.173.218
cuban_external
1,201,944
10.12.163.36
xetid_internal
1,179,374
10.12.45.169
xetid_internal
1,120,936
10.12.24.202
xetid_internal
1,005,036
10.12.45.19
xetid_internal
927,566
10.12.46.147
xetid_internal
869,982
TOP STATE /24 SUBNETS
10.12.163.0/24
xetid_internal
144 IPs · 154,777,378
10.12.45.0/24
xetid_internal
49 IPs · 29,677,284
10.12.46.0/24
xetid_internal
90 IPs · 26,695,376
10.12.24.0/24
xetid_internal
18 IPs · 3,853,834
10.12.44.0/24
xetid_internal
30 IPs · 2,059,386
10.12.40.0/24
xetid_internal
46 IPs · 1,229,680
200.55.173.0/24
cuban_external
2 IPs · 1,202,546
10.30.0.0/24
internal_rfc1918
13 IPs · 746,040
10.12.165.0/24
xetid_internal
41 IPs · 727,854
10.12.29.0/24
xetid_internal
90 IPs · 622,556
10.12.171.0/24
xetid_internal
2 IPs · 580,160
10.30.118.0/24
internal_rfc1918
12 IPs · 398,914
STATE DB / SSH INFRASTRUCTURE (metadata only — no credentials)
[postgres]
Genesig.BD9.xetid:5432 · db=Genesig_2.0_guantanamo · u=ing
[other]
Git.BD.xetid · db=git · u=zeolides
[winscp]
10.12.0.11 · u=root
[winscp]
10.12.151.30 · u=server
[winscp]
10.12.151.31 · u=server
[winscp]
10.12.151.32 · u=server
[winscp]
10.12.151.36 · u=server
[winscp]
10.12.151.47 · u=%EF%BB%BFpe%C3%B1a
[winscp]
10.12.151.67:9010 · u=administrador
[winscp]
10.12.151.67:9011 · u=adminxutil
[winscp]
10.12.151.67:9012 · u=administrador
[winscp]
10.12.151.67:9014 · u=administrador
[winscp]
10.12.151.67:9015 · u=adminxutil
[winscp]
10.12.151.67:9016 · u=adminxutil
[winscp]
10.12.170.117 · u=root
[winscp]
10.12.170.125 · u=root
[winscp]
10.12.170.136 · u=root
[winscp]
10.12.170.23 · u=root
[winscp]
10.12.170.70 · u=root
[winscp]
10.12.174.210 · u=root
[winscp]
10.30.0.20 · u=adminxutil
[winscp]
10.30.0.69:2202 · u=administrador
[winscp]
10.50.8.106 · u=root
[winscp]
10.50.8.109 · u=root
[winscp]
10.50.8.123 · u=root
[winscp]
10.50.8.124 · u=root
[winscp]
192.168.56.101 · u=root
[winscp]
192.168.56.101 · u=server
[winscp]
192.168.56.102 · u=server
[winscp]
192.168.56.104 · u=root
[login]
certificados.xetid.cu
· u=nairoviss
[login]
distra-acinox.prod.xetid.cu
· u=administrador
[login]
distra-aseguramientocomercio.prod.xetid.cu
· u=administrador
[login]
distra-cementomariel.prod.xetid.cu
· u=administrador
[login]
distra-dipmariel.prod.xetid.cu
· u=administrador
[login]
distra-divep.prod.xetid.cu
· u=administrador
[login]
distra-sigerh.prod.xetid.cu
· u=adelaida
[login]
distra.encomil.co.cu
· u=logistica1
[login]
distra.soygraf.cu
· u=confin2
[login]
distra.suchel.co.cu
· u=inv
[login]
idp.ecmmariel.cu
· u=kenier
[login]
internet-cd.xetid.cu
· u=ixabella
[login]
internet-sp.xetid.cu
· u=algo
[login]
internet-sp.xetid.cu
· u=algo
[login]
internet-sp.xetid.cu
· u=ixabella
[login]
internet-sp.xetid.cu
· u=ygonzaleza
[login]
sp-gespro.prod.xetid.cu
· u=algo
ATTACK-SURFACE / EXPOSURE MAP — Shodan InternetDB (public index, read-only)
1,683 checked · 365 indexed
70 with known CVEs Full detail →
MOST-EXPOSED STATE HOSTS (by CVE count)
190.9.130.90
190.9-130-90.static.cantv.net 373 CVE
CVE-2015-3429 CVE-2021-44223 CVE-2016-6289 CVE-2019-17670 CVE-2016-7130 CVE-2016-5771
201.249.52.22
intranet.insalud.gob.ve, roraima.insalud.gob.ve 332 CVE
CVE-2026-7262 CVE-2026-34032 CVE-2026-35414 CVE-2026-7259 CVE-2026-42536 CVE-2013-2765
152.206.201.89
srv89201-206152.vps.etecsa.cu, webmail.countigo.cu 206 CVE
CVE-2024-33661 CVE-2019-2791 CVE-2024-33662 CVE-2019-2946 CVE-2019-2486 CVE-2019-2774
181.225.235.176
miempresa.etecsa.cu 193 CVE
CVE-2019-10092 CVE-2026-28387 CVE-2009-2299 CVE-2026-22795 CVE-2022-4304 CVE-2021-3711
181.225.233.4
168 CVE
CVE-2016-8612 CVE-2025-68160 CVE-2026-45447 CVE-2013-4365 CVE-2024-38477 CVE-2024-38476
190.92.127.20
en.escambray.cu, bohemia.cu 152 CVE
CVE-2016-8612 CVE-2013-4365 CVE-2024-38477 CVE-2024-38476 CVE-2026-42535 CVE-2021-32791
201.249.66.174
201-249-66-174-bto-00.rai.cantv.net, indet.sytes.net 138 CVE
CVE-2026-49975 CVE-2025-49812 CVE-2018-1303 CVE-2026-29170 CVE-2013-0942 CVE-2026-29168
190.9.130.168
190.9-130-168.static.cantv.net 132 CVE
CVE-2025-49812 CVE-2018-1303 CVE-2026-29170 CVE-2013-0942 CVE-2026-93546 CVE-2026-24072
190.205.40.74
190.205.40.74-bto-00.rai.cantv.net 127 CVE
CVE-2026-49975 CVE-2025-49812 CVE-2026-29170 CVE-2013-0942 CVE-2026-29168 CVE-2026-93546
200.44.12.110
200-44-12-110.cnt-02.rai.cantv.net, nube.conatel.gob.ve 126 CVE
CVE-2025-49812 CVE-2018-1303 CVE-2026-29170 CVE-2012-4558 CVE-2013-0942 CVE-2017-16642
201.248.68.116
201-248-67-116.cnt-02.rai.cantv.net, inn.gob.ve 123 CVE
CVE-2026-42536 CVE-2020-13938 CVE-2026-58415 CVE-2026-63718 CVE-2026-5950 CVE-2021-30641
201.248.68.117
innqr.inn.gob.ve, 201-248-67-117.cnt-02.rai.cantv.net 118 CVE
CVE-2026-42536 CVE-2020-13938 CVE-2026-58415 CVE-2026-63718 CVE-2021-30641 CVE-2007-4723
152.206.177.165
srv165177-206152.vps.etecsa.cu 117 CVE
CVE-2009-2299 CVE-2026-59797 CVE-2026-63686 CVE-2021-44224 CVE-2022-28614 CVE-2011-1176
190.202.26.12
190-202-26-12.chc-00.rai.cantv.net 109 CVE
CVE-2019-10092 CVE-2009-2299 CVE-2021-44224 CVE-2022-28614 CVE-2011-1176 CVE-2020-13938
152.206.3.53
vlired.cu, correo.uclv.edu.cu 101 CVE
CVE-2026-44631 CVE-2026-42536 CVE-2026-33007 CVE-2024-38473 CVE-2024-43394 CVE-2021-44790
152.206.201.15
srv15201-206152.vps.etecsa.cu 99 CVE
CVE-2009-2299 CVE-2021-44224 CVE-2022-28614 CVE-2011-1176 CVE-2020-13938 CVE-2024-39573
190.202.150.77
190-202-150-77-chc-00.rai.cantv.net, www.fona.gob.ve 99 CVE
CVE-2026-49975 CVE-2025-49812 CVE-2026-29170 CVE-2013-0942 CVE-2026-29168 CVE-2026-24072
166.1.68.179
www.fondoefa.gob.ve, fondoefa.gob.ve 94 CVE
CVE-2026-42536 CVE-2026-58415 CVE-2026-63718 CVE-2007-4723 CVE-2026-33007 CVE-2026-29169
161.196.43.73
cantv.com.ve, www.cantv.com.ve 91 CVE
CVE-2011-3857 CVE-2009-2396 CVE-2012-1205 CVE-2010-2924 CVE-2011-3864 CVE-2011-3853
8.242.232.210
pagos.alcaldiachacao.net 86 CVE
CVE-2026-24072 CVE-2026-63075 CVE-2026-34032 CVE-2026-31790 CVE-2026-42536 CVE-2013-0942
TOP EXPOSED PORTS
80
256 hosts
443
220 hosts
53
90 hosts
25
68 hosts
22
44 hosts
465
40 hosts
993
40 hosts
2087
40 hosts
2083
39 hosts
2086
37 hosts
2082
36 hosts
587
34 hosts
143
31 hosts
8443
29 hosts
FINGERPRINTED SOFTWARE
f5:nginx
86
apache:http_server
40
postfix:postfix
38
canonical:ubuntu_linux
35
openbsd:openssh:8.2p1
20
linux:linux_kernel
19
cloudflare:cloudflare
19
debian:debian_linux
16
getbootstrap:bootstrap
15
jquery:jquery
13
openresty:openresty:1.31.1.1
13
openresty:lua-nginx-module:1.31.1.1
11
Source: Shodan InternetDB — a public index of internet-facing services. Read-only; CubaIntel never connects to, scans, or exploits any host. Coverage is bounded and reflects what Shodan has indexed, not a complete survey.
HOSTS / DBs (raw_hosts.txt) · 3,711
⇩ CSV
10.12.163.35
xetid_internal
·444615
bienestar-vhabitat.xutil.cu
state_web
·171778
10.12.163.40
xetid_internal
·77025
10.12.163.46
xetid_internal
·61424
facturacion.prod.xetid.cu
xetid_internal
·29182
www.mindus.gob.cu
gobcu
·13296
facturacion.xetid.cu
xetid_internal
·12044
10.12.163.44
xetid_internal
·9254
melfi.prod.xetid.cu
xetid_internal
·7035
10.12.163.36
xetid_internal
·4807
bienestar-palacio.presidencia.gob.cu
gobcu
·2086
bienestar-vhabitat.prod.xetid.cu
xetid_internal
·876
trd.xetid.cu
xetid_internal
·402
www.xetid.cu
xetid_internal
·390
www.cubadebate.cu
state_web
·288
bienestar-lisa.prod.xetid.cu
xetid_internal
·281
www.gacetaoficial.gob.cu
gobcu
·236
distra-cf.prod.xetid.cu
xetid_internal
·188
www.minrex.gob.cu
gobcu
·185
salud.msp.gob.cu
gobcu
·184
www.redcuba.cu
state_web
·173
xetidshop.local
xetid_internal
·172
git-ausa.xetid.cu
xetid_internal
·164
mesaredonda.cubadebate.cu
state_web
·127
teveo.cu
state_web
·125
www.presidencia.gob.cu
gobcu
·124
www.parlamentocubano.cu
state_web
·124
www.fidelcastro.cu
state_web
·124
www.sime.cu
state_web
·123
www.picta.cu
state_web
·123
www.ondi.cu
state_web
·123
www.ligera.cu
state_web
·123
www.gesta.cu
state_web
·123
www.gelect.cu
state_web
·123
www.geiq.cu
state_web
·123
cubarecicla.ger.cu
state_web
·123
5tay42.xetid.cu
xetid_internal
·118
Git.BD.xetid
xetid_internal
·114
piwik.cimex.com.cu
state_web
·113
emisor.cimex.com.cu
state_web
·113
webmail.cimex.com.cu
state_web
·113
Genesig.BD.xetid
xetid_internal
·113
www.minjus.gob.cu
gobcu
·112
minjus.gob.cu
gobcu
·112
gacetaoficial.gob.cu
gobcu
·112
cij.minjus.gob.cu
gobcu
·112
gacetaoficial.cu
state_web
·112
minag.gob.cu
gobcu
·112
www.granma.cu
state_web
·105
Genesig.BD9.xetid
xetid_internal
·102
varbase9.xetid.cu
xetid_internal
·96
it.granma.cu
state_web
·75
granma.cu
state_web
·75
datos.granma.cu
state_web
·75
de.granma.cu
state_web
·75
webmail.granma.cu
state_web
·75
pt.granma.cu
state_web
·75
en.granma.cu
state_web
·75
portal.granma.cu
state_web
·75
www.fr.granma.cu
state_web
·75
www.it.granma.cu
state_web
·75
fr.granma.cu
state_web
·75
www.pt.granma.cu
state_web
·75
www.en.granma.cu
state_web
·75
planteamientos-cmg.prod.xetid.cu
xetid_internal
·69
10.12.29.191
xetid_internal
·68
xetid-analytic.enzona.xetid.cu
xetid_internal
·67
gitlab-goe.prod.xetid.cu
xetid_internal
·67
pkicertificados.xetid.cu
xetid_internal
·67
turn1.voxes.xetid.cu
xetid_internal
·67
pkitsa.xetid.cu
xetid_internal
·67
gitlab-hedexi.prod.xetid.cu
xetid_internal
·67
pkiocsp.xetid.cu
xetid_internal
·67
bienestar-aica.prod.xetid.cu
xetid_internal
·67
voxes.xetid.cu
xetid_internal
·67
apisandbox.enzona.xetid.cu
xetid_internal
·67
pkicrl.xetid.cu
xetid_internal
·67
xetid.cu
xetid_internal
·67
identitysandbox.enzona.xetid.cu
xetid_internal
·67
api.voxes.xetid.cu
xetid_internal
·67
turn2.voxes.xetid.cu
xetid_internal
·67
registry-hedexi.prod.xetid.cu
xetid_internal
·67
util.enzona.xetid.cu
xetid_internal
·67
caracol-xevent.test.xetid.cu
xetid_internal
·67
www.mep.gob.cu
gobcu
·67
www.mincin.gob.cu
gobcu
·64
estadistica-palacio.presidencia.gob.cu
gobcu
·62
solicitudes-palacio.presidencia.gob.cu
gobcu
·62
s3.cimex.com.cu
state_web
·62
docker.cimex.com.cu
state_web
·62
das-ocs05.cimex.com.cu
state_web
·62
cdn.cimex.com.cu
state_web
·62
jabber.cimex.com.cu
state_web
·62
webtarjetas.cimex.com.cu
state_web
·62
cimex.com.cu
state_web
·62
ilog.cimex.com.cu
state_web
·62
jitsi.cimex.com.cu
state_web
·62
www.cubaminrex.cu
state_web
·62
visasonline.cubaminrex.cu
state_web
·62
misiones.cubaminrex.cu
state_web
·62
1 / 38
Next →
URLS — STATE-AFFILIATED
10,110 total
⇩ CSV10.12.163.35/ServiceProvider/ACS/
http · internal_ip_app · 917 hits
10.12.163.46/configuracion/fecha/index.php/gestionarfecha/gestionarfecha
http · internal_ip_app · 858 hits
10.12.163.46/contabilidad/banco/configuracion/cuentabancaria/index.php/cuentabancaria/cuentabancaria
http · internal_ip_app · 780 hits
facturacion.prod.xetid.cu/seguridad/index.php/gestsist/gestsist
http · xetid_web · 737 hits
10.12.163.46/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · internal_ip_app · 713 hits
facturacion.xetid.cu/portal/
http · xetid_web · 684 hits
melfi.prod.xetid.cu/planificacion/viaje/planeacion/index.php/viaje/index
http · xetid_web · 678 hits
facturacion.prod.xetid.cu/configuracion/nomgenerales/index.php/nomencladoresgenerales/nomencladoresgenerales
http · xetid_web · 649 hits
10.12.163.35/metadatos/estructura/index.php/estructura/gestionarEstructura
http · internal_ip_app · 617 hits
www.mindus.gob.cu/es/admin/coffee/get-data
https · gobcu_web · 596 hits
facturacion.xetid.cu/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · xetid_web · 594 hits
10.12.163.35/logistica/inventario/entrada/entrada/index.php/apertura/gestapertura
http · internal_ip_app · 570 hits
bienestar-palacio.presidencia.gob.cu/syspalacio/es-ES/palacio/4637140895dce014fbf46e3063559010,
https · gobcu_web · 569 hits
10.12.163.46/contabilidad/banco/instrumento/index.php/gestionarinstrumentobancario/gestionarinstrumentobancario
http · internal_ip_app · 561 hits
10.12.163.40/ServiceProvider/ACS/
http · internal_ip_app · 547 hits
10.12.163.46/configuracion/modeloscontabilizacion/gestoperaciones/index.php/gestoperaciones/gestoperaciones
http · internal_ip_app · 521 hits
facturacion.prod.xetid.cu/seguridad/index.php/configaccesos/configaccesos
http · xetid_web · 517 hits
10.12.163.46/portal/
http · internal_ip_app · 506 hits
melfi.prod.xetid.cu/logistica/transmaritima/bl/index.php/bill/index
http · xetid_web · 499 hits
10.12.163.46/configuracion/subsistemas/index.php/gestsubsistemas/gestsubsistemas
http · internal_ip_app · 498 hits
10.12.163.36/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 493 hits
10.12.163.35/configuracion/nomgenerales/index.php/nomencladoresgenerales/nomencladoresgenerales
http · internal_ip_app · 481 hits
10.12.163.46/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 462 hits
facturacion.xetid.cu/metadatos/estructura/index.php/estructura/gestionarEstructura
http · xetid_web · 459 hits
facturacion.prod.xetid.cu/configuracion/subsistemas/index.php/gestsubsistemas/gestsubsistemas
http · xetid_web · 410 hits
bienestar-vhabitat.xutil.cu/sysvivienda_habitat/en/xetid/tracker/login
https · gobcu_web · 408 hits
10.12.163.40/logistica/utiles/configuracion/index.php/configlogistica/configlogistica
http · internal_ip_app · 407 hits
melfi.prod.xetid.cu/crm/application/index.php/main/main
http · xetid_web · 405 hits
10.12.163.36/portal/index.php/portal/portal
http · internal_ip_app · 404 hits
melfi.prod.xetid.cu/portal/
http · xetid_web · 404 hits
facturacion.prod.xetid.cu/metadatos/estructura/index.php/estructura/gestionarEstructura
http · xetid_web · 402 hits
bienestar-palacio.presidencia.gob.cu/syspalacio/es-ES/palacio/4637140895dce014fbf46e3063559010/palacio
https · gobcu_web · 402 hits
10.12.163.35/logistica/facturacion/puntoventa/index.php/configuracionpuntoventa/configuracionpuntoventa
http · internal_ip_app · 399 hits
facturacion.prod.xetid.cu/configuracion/cargainicial/index.php/cargainicial/cargainicial
http · xetid_web · 384 hits
www.mindus.gob.cu/en
https · gobcu_web · 382 hits
facturacion.prod.xetid.cu/configuracion/formatos/index.php/formatos/gestionarformatos
http · xetid_web · 378 hits
10.12.163.35/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 377 hits
10.12.163.35/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · internal_ip_app · 371 hits
10.12.163.40/logistica/inventario/entrada/entrada/index.php/recepcion/gestrecepcion
http · internal_ip_app · 364 hits
facturacion.xetid.cu/ServiceProvider/ACS/
http · xetid_web · 348 hits
10.12.163.46/configuracion/documento/index.php/documentos/documentos
http · internal_ip_app · 344 hits
10.12.163.46/portal/
http · internal_ip_app · 336 hits
10.12.163.46/configuracion/clientesyproveedores/index.php/clientesyproveedores/clientesyproveedores
http · internal_ip_app · 333 hits
facturacion.prod.xetid.cu/logistica/utiles/maestroproductos/index.php/gestgruposubgrupo/gestgruposubgrupo
http · xetid_web · 333 hits
bienestar-vhabitat.prod.xetid.cu/sysvivienda_habitat/es-ES/gobvcl/tracker/login
https · xetid_web · 330 hits
trd.xetid.cu/admin950okpk2n/index.php
http · xetid_web · 318 hits
www.mindus.gob.cu/es/admin/modules/install
https · gobcu_web · 308 hits
10.12.163.40/seguridad/index.php/configaccesos/configaccesos
http · internal_ip_app · 306 hits
bienestar-vhabitat.xutil.cu/sysvivienda_habitat/en/neoclassic/tracker/login
https · gobcu_web · 304 hits
www.mindus.gob.cu/es/admin/structure/webform
https · gobcu_web · 301 hits
