🌐 State IT Infrastructure — LEAKS Intel
· Cuban gov hosts + URLs + IP subnets · linked to state mailboxes
STATE URLS
10,110
100% of all URLs
URL HITS (cumulative)
837,961
UNIQUE STATE HOSTS
20+
17 internal /24 subnets
TOP STATE HOSTS — by URL hits
| Host | URLs | Total hits | Mailbox? |
|---|---|---|---|
| 10.12.163.35 | 63 | 444,615 | — |
| bienestar-vhabitat.xutil.cu | 8242 | 171,778 | — |
| 10.12.163.40 | 43 | 77,025 | — |
| 10.12.163.46 | 82 | 61,424 | — |
| facturacion.prod.xetid.cu | 60 | 29,182 | — |
| www.mindus.gob.cu | 306 | 13,235 | — |
| facturacion.xetid.cu | 33 | 12,044 | — |
| 10.12.163.44 | 19 | 9,254 | — |
| melfi.prod.xetid.cu | 27 | 7,035 | — |
| 10.12.163.36 | 12 | 4,807 | — |
| bienestar-palacio.presidencia.gob.cu | 602 | 2,024 | — |
| bienestar-vhabitat.prod.xetid.cu | 170 | 876 | — |
| trd.xetid.cu | 11 | 402 | — |
| www.xetid.cu | 3 | 323 | — |
| www.cubadebate.cu | 28 | 288 | — |
| bienestar-lisa.prod.xetid.cu | 35 | 214 | — |
| distra-cf.prod.xetid.cu | 13 | 188 | — |
| xetidshop.local | 93 | 172 | — |
| git-ausa.xetid.cu | 2 | 164 | — |
| mesaredonda.cubadebate.cu | 3 | 127 | — |
INTERNAL SUBNETS /24
10.12.163.0/24
597,134 hits
10.12.170.0/24
82 hits
10.12.29.0/24
68 hits
10.12.38.0/24
29 hits
10.12.35.0/24
17 hits
10.12.173.0/24
16 hits
10.12.167.0/24
11 hits
10.12.45.0/24
10 hits
10.12.46.0/24
8 hits
10.12.34.0/24
4 hits
10.12.171.0/24
2 hits
10.12.3.0/24
2 hits
10.12.47.0/24
2 hits
192.168.0.0/24
2 hits
10.12.161.0/24
1 hits
10.12.174.0/24
1 hits
192.168.223.0/24
1 hits
🔓 LEAKED INTERNAL HOSTS — 109 named in the regime's own leaked docs · 28 corroborated live
TOP STATE IPs — by mentions
10.12.163.35
xetid_internal
106,868,950
10.12.163.46
xetid_internal
19,165,956
10.12.163.40
xetid_internal
18,318,056
10.12.46.38
xetid_internal
9,622,262
10.12.45.38
xetid_internal
6,493,084
10.12.45.8
xetid_internal
6,336,070
10.12.45.9
xetid_internal
2,910,188
10.12.45.23
xetid_internal
2,509,906
10.12.45.3
xetid_internal
2,388,394
10.12.163.44
xetid_internal
2,258,464
10.12.163.30
xetid_internal
2,050,210
10.12.46.93
xetid_internal
1,912,838
10.12.46.37
xetid_internal
1,877,702
10.12.163.27
xetid_internal
1,727,764
10.12.24.113
xetid_internal
1,625,162
10.12.46.9
xetid_internal
1,592,710
10.12.46.3
xetid_internal
1,362,252
10.12.45.39
xetid_internal
1,292,590
10.12.46.23
xetid_internal
1,252,940
200.55.173.218
cuban_external
1,201,944
10.12.163.36
xetid_internal
1,179,374
10.12.45.169
xetid_internal
1,120,936
10.12.24.202
xetid_internal
1,005,036
10.12.45.19
xetid_internal
927,566
10.12.46.147
xetid_internal
869,982
TOP STATE /24 SUBNETS
10.12.163.0/24
xetid_internal
144 IPs · 154,777,378
10.12.45.0/24
xetid_internal
49 IPs · 29,677,284
10.12.46.0/24
xetid_internal
90 IPs · 26,695,376
10.12.24.0/24
xetid_internal
18 IPs · 3,853,834
10.12.44.0/24
xetid_internal
30 IPs · 2,059,386
10.12.40.0/24
xetid_internal
46 IPs · 1,229,680
200.55.173.0/24
cuban_external
2 IPs · 1,202,546
10.30.0.0/24
internal_rfc1918
13 IPs · 746,040
10.12.165.0/24
xetid_internal
41 IPs · 727,854
10.12.29.0/24
xetid_internal
90 IPs · 622,556
10.12.171.0/24
xetid_internal
2 IPs · 580,160
10.30.118.0/24
internal_rfc1918
12 IPs · 398,914
STATE DB / SSH INFRASTRUCTURE (metadata only — no credentials)
[postgres]
Genesig.BD9.xetid:5432 · db=Genesig_2.0_guantanamo · u=ing
[other]
Git.BD.xetid · db=git · u=zeolides
[winscp]
10.12.0.11 · u=root
[winscp]
10.12.151.30 · u=server
[winscp]
10.12.151.31 · u=server
[winscp]
10.12.151.32 · u=server
[winscp]
10.12.151.36 · u=server
[winscp]
10.12.151.47 · u=%EF%BB%BFpe%C3%B1a
[winscp]
10.12.151.67:9010 · u=administrador
[winscp]
10.12.151.67:9011 · u=adminxutil
[winscp]
10.12.151.67:9012 · u=administrador
[winscp]
10.12.151.67:9014 · u=administrador
[winscp]
10.12.151.67:9015 · u=adminxutil
[winscp]
10.12.151.67:9016 · u=adminxutil
[winscp]
10.12.170.117 · u=root
[winscp]
10.12.170.125 · u=root
[winscp]
10.12.170.136 · u=root
[winscp]
10.12.170.23 · u=root
[winscp]
10.12.170.70 · u=root
[winscp]
10.12.174.210 · u=root
[winscp]
10.30.0.20 · u=adminxutil
[winscp]
10.30.0.69:2202 · u=administrador
[winscp]
10.50.8.106 · u=root
[winscp]
10.50.8.109 · u=root
[winscp]
10.50.8.123 · u=root
[winscp]
10.50.8.124 · u=root
[winscp]
192.168.56.101 · u=root
[winscp]
192.168.56.101 · u=server
[winscp]
192.168.56.102 · u=server
[winscp]
192.168.56.104 · u=root
[login]
certificados.xetid.cu
· u=nairoviss
[login]
distra-acinox.prod.xetid.cu
· u=administrador
[login]
distra-aseguramientocomercio.prod.xetid.cu
· u=administrador
[login]
distra-cementomariel.prod.xetid.cu
· u=administrador
[login]
distra-dipmariel.prod.xetid.cu
· u=administrador
[login]
distra-divep.prod.xetid.cu
· u=administrador
[login]
distra-sigerh.prod.xetid.cu
· u=adelaida
[login]
distra.encomil.co.cu
· u=logistica1
[login]
distra.soygraf.cu
· u=confin2
[login]
distra.suchel.co.cu
· u=inv
[login]
idp.ecmmariel.cu
· u=kenier
[login]
internet-cd.xetid.cu
· u=ixabella
[login]
internet-sp.xetid.cu
· u=algo
[login]
internet-sp.xetid.cu
· u=algo
[login]
internet-sp.xetid.cu
· u=ixabella
[login]
internet-sp.xetid.cu
· u=ygonzaleza
[login]
sp-gespro.prod.xetid.cu
· u=algo
ATTACK-SURFACE / EXPOSURE MAP — Shodan InternetDB (public index, read-only)
1,683 checked · 365 indexed
70 with known CVEs Full detail →
MOST-EXPOSED STATE HOSTS (by CVE count)
190.9.130.90
190.9-130-90.static.cantv.net 373 CVE
CVE-2015-3429 CVE-2021-44223 CVE-2016-6289 CVE-2019-17670 CVE-2016-7130 CVE-2016-5771
201.249.52.22
intranet.insalud.gob.ve, roraima.insalud.gob.ve 332 CVE
CVE-2026-7262 CVE-2026-34032 CVE-2026-35414 CVE-2026-7259 CVE-2026-42536 CVE-2013-2765
152.206.201.89
srv89201-206152.vps.etecsa.cu, webmail.countigo.cu 206 CVE
CVE-2024-33661 CVE-2019-2791 CVE-2024-33662 CVE-2019-2946 CVE-2019-2486 CVE-2019-2774
181.225.235.176
miempresa.etecsa.cu 193 CVE
CVE-2019-10092 CVE-2026-28387 CVE-2009-2299 CVE-2026-22795 CVE-2022-4304 CVE-2021-3711
181.225.233.4
168 CVE
CVE-2016-8612 CVE-2025-68160 CVE-2026-45447 CVE-2013-4365 CVE-2024-38477 CVE-2024-38476
190.92.127.20
en.escambray.cu, bohemia.cu 152 CVE
CVE-2016-8612 CVE-2013-4365 CVE-2024-38477 CVE-2024-38476 CVE-2026-42535 CVE-2021-32791
201.249.66.174
201-249-66-174-bto-00.rai.cantv.net, indet.sytes.net 138 CVE
CVE-2026-49975 CVE-2025-49812 CVE-2018-1303 CVE-2026-29170 CVE-2013-0942 CVE-2026-29168
190.9.130.168
190.9-130-168.static.cantv.net 132 CVE
CVE-2025-49812 CVE-2018-1303 CVE-2026-29170 CVE-2013-0942 CVE-2026-93546 CVE-2026-24072
190.205.40.74
190.205.40.74-bto-00.rai.cantv.net 127 CVE
CVE-2026-49975 CVE-2025-49812 CVE-2026-29170 CVE-2013-0942 CVE-2026-29168 CVE-2026-93546
200.44.12.110
200-44-12-110.cnt-02.rai.cantv.net, nube.conatel.gob.ve 126 CVE
CVE-2025-49812 CVE-2018-1303 CVE-2026-29170 CVE-2012-4558 CVE-2013-0942 CVE-2017-16642
201.248.68.116
201-248-67-116.cnt-02.rai.cantv.net, inn.gob.ve 123 CVE
CVE-2026-42536 CVE-2020-13938 CVE-2026-58415 CVE-2026-63718 CVE-2026-5950 CVE-2021-30641
201.248.68.117
innqr.inn.gob.ve, 201-248-67-117.cnt-02.rai.cantv.net 118 CVE
CVE-2026-42536 CVE-2020-13938 CVE-2026-58415 CVE-2026-63718 CVE-2021-30641 CVE-2007-4723
152.206.177.165
srv165177-206152.vps.etecsa.cu 117 CVE
CVE-2009-2299 CVE-2026-59797 CVE-2026-63686 CVE-2021-44224 CVE-2022-28614 CVE-2011-1176
190.202.26.12
190-202-26-12.chc-00.rai.cantv.net 109 CVE
CVE-2019-10092 CVE-2009-2299 CVE-2021-44224 CVE-2022-28614 CVE-2011-1176 CVE-2020-13938
152.206.3.53
vlired.cu, correo.uclv.edu.cu 101 CVE
CVE-2026-44631 CVE-2026-42536 CVE-2026-33007 CVE-2024-38473 CVE-2024-43394 CVE-2021-44790
152.206.201.15
srv15201-206152.vps.etecsa.cu 99 CVE
CVE-2009-2299 CVE-2021-44224 CVE-2022-28614 CVE-2011-1176 CVE-2020-13938 CVE-2024-39573
190.202.150.77
190-202-150-77-chc-00.rai.cantv.net, www.fona.gob.ve 99 CVE
CVE-2026-49975 CVE-2025-49812 CVE-2026-29170 CVE-2013-0942 CVE-2026-29168 CVE-2026-24072
166.1.68.179
www.fondoefa.gob.ve, fondoefa.gob.ve 94 CVE
CVE-2026-42536 CVE-2026-58415 CVE-2026-63718 CVE-2007-4723 CVE-2026-33007 CVE-2026-29169
161.196.43.73
cantv.com.ve, www.cantv.com.ve 91 CVE
CVE-2011-3857 CVE-2009-2396 CVE-2012-1205 CVE-2010-2924 CVE-2011-3864 CVE-2011-3853
8.242.232.210
pagos.alcaldiachacao.net 86 CVE
CVE-2026-24072 CVE-2026-63075 CVE-2026-34032 CVE-2026-31790 CVE-2026-42536 CVE-2013-0942
TOP EXPOSED PORTS
80
256 hosts
443
220 hosts
53
90 hosts
25
68 hosts
22
44 hosts
465
40 hosts
993
40 hosts
2087
40 hosts
2083
39 hosts
2086
37 hosts
2082
36 hosts
587
34 hosts
143
31 hosts
8443
29 hosts
FINGERPRINTED SOFTWARE
f5:nginx
86
apache:http_server
40
postfix:postfix
38
canonical:ubuntu_linux
35
openbsd:openssh:8.2p1
20
linux:linux_kernel
19
cloudflare:cloudflare
19
debian:debian_linux
16
getbootstrap:bootstrap
15
jquery:jquery
13
openresty:openresty:1.31.1.1
13
openresty:lua-nginx-module:1.31.1.1
11
Source: Shodan InternetDB — a public index of internet-facing services. Read-only; CubaIntel never connects to, scans, or exploits any host. Coverage is bounded and reflects what Shodan has indexed, not a complete survey.
HOSTS / DBs (raw_hosts.txt) · 3,711
⇩ CSV
10.12.163.35
xetid_internal
·444615
bienestar-vhabitat.xutil.cu
state_web
·171778
10.12.163.40
xetid_internal
·77025
10.12.163.46
xetid_internal
·61424
facturacion.prod.xetid.cu
xetid_internal
·29182
www.mindus.gob.cu
gobcu
·13296
facturacion.xetid.cu
xetid_internal
·12044
10.12.163.44
xetid_internal
·9254
melfi.prod.xetid.cu
xetid_internal
·7035
10.12.163.36
xetid_internal
·4807
bienestar-palacio.presidencia.gob.cu
gobcu
·2086
bienestar-vhabitat.prod.xetid.cu
xetid_internal
·876
trd.xetid.cu
xetid_internal
·402
www.xetid.cu
xetid_internal
·390
www.cubadebate.cu
state_web
·288
bienestar-lisa.prod.xetid.cu
xetid_internal
·281
www.gacetaoficial.gob.cu
gobcu
·236
distra-cf.prod.xetid.cu
xetid_internal
·188
www.minrex.gob.cu
gobcu
·185
salud.msp.gob.cu
gobcu
·184
www.redcuba.cu
state_web
·173
xetidshop.local
xetid_internal
·172
git-ausa.xetid.cu
xetid_internal
·164
mesaredonda.cubadebate.cu
state_web
·127
teveo.cu
state_web
·125
www.presidencia.gob.cu
gobcu
·124
www.parlamentocubano.cu
state_web
·124
www.fidelcastro.cu
state_web
·124
www.sime.cu
state_web
·123
www.picta.cu
state_web
·123
www.ondi.cu
state_web
·123
www.ligera.cu
state_web
·123
www.gesta.cu
state_web
·123
www.gelect.cu
state_web
·123
www.geiq.cu
state_web
·123
cubarecicla.ger.cu
state_web
·123
5tay42.xetid.cu
xetid_internal
·118
Git.BD.xetid
xetid_internal
·114
piwik.cimex.com.cu
state_web
·113
emisor.cimex.com.cu
state_web
·113
webmail.cimex.com.cu
state_web
·113
Genesig.BD.xetid
xetid_internal
·113
www.minjus.gob.cu
gobcu
·112
minjus.gob.cu
gobcu
·112
gacetaoficial.gob.cu
gobcu
·112
cij.minjus.gob.cu
gobcu
·112
gacetaoficial.cu
state_web
·112
minag.gob.cu
gobcu
·112
www.granma.cu
state_web
·105
Genesig.BD9.xetid
xetid_internal
·102
varbase9.xetid.cu
xetid_internal
·96
it.granma.cu
state_web
·75
granma.cu
state_web
·75
datos.granma.cu
state_web
·75
de.granma.cu
state_web
·75
webmail.granma.cu
state_web
·75
pt.granma.cu
state_web
·75
en.granma.cu
state_web
·75
portal.granma.cu
state_web
·75
www.fr.granma.cu
state_web
·75
www.it.granma.cu
state_web
·75
fr.granma.cu
state_web
·75
www.pt.granma.cu
state_web
·75
www.en.granma.cu
state_web
·75
planteamientos-cmg.prod.xetid.cu
xetid_internal
·69
10.12.29.191
xetid_internal
·68
xetid-analytic.enzona.xetid.cu
xetid_internal
·67
gitlab-goe.prod.xetid.cu
xetid_internal
·67
pkicertificados.xetid.cu
xetid_internal
·67
turn1.voxes.xetid.cu
xetid_internal
·67
pkitsa.xetid.cu
xetid_internal
·67
gitlab-hedexi.prod.xetid.cu
xetid_internal
·67
pkiocsp.xetid.cu
xetid_internal
·67
bienestar-aica.prod.xetid.cu
xetid_internal
·67
voxes.xetid.cu
xetid_internal
·67
apisandbox.enzona.xetid.cu
xetid_internal
·67
pkicrl.xetid.cu
xetid_internal
·67
xetid.cu
xetid_internal
·67
identitysandbox.enzona.xetid.cu
xetid_internal
·67
api.voxes.xetid.cu
xetid_internal
·67
turn2.voxes.xetid.cu
xetid_internal
·67
registry-hedexi.prod.xetid.cu
xetid_internal
·67
util.enzona.xetid.cu
xetid_internal
·67
caracol-xevent.test.xetid.cu
xetid_internal
·67
www.mep.gob.cu
gobcu
·67
www.mincin.gob.cu
gobcu
·64
estadistica-palacio.presidencia.gob.cu
gobcu
·62
solicitudes-palacio.presidencia.gob.cu
gobcu
·62
s3.cimex.com.cu
state_web
·62
docker.cimex.com.cu
state_web
·62
das-ocs05.cimex.com.cu
state_web
·62
cdn.cimex.com.cu
state_web
·62
jabber.cimex.com.cu
state_web
·62
webtarjetas.cimex.com.cu
state_web
·62
cimex.com.cu
state_web
·62
ilog.cimex.com.cu
state_web
·62
jitsi.cimex.com.cu
state_web
·62
www.cubaminrex.cu
state_web
·62
visasonline.cubaminrex.cu
state_web
·62
misiones.cubaminrex.cu
state_web
·62
1 / 38
Next →
URLS — STATE-AFFILIATED
10,110 total
⇩ CSV10.12.163.46/seguridad/index.php/configaccesos/configaccesos
http · internal_ip_app · 285 hits
facturacion.prod.xetid.cu/logistica/utiles/nomencladores/index.php/nomencladores/nomencladores
http · xetid_web · 280 hits
10.12.163.40/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 279 hits
10.12.163.44/logistica/farmacia/farmacia/index.php/tarjetamedicamento/tarjetamedicamento
http · internal_ip_app · 275 hits
10.12.163.36/logistica/farmacia/farmacia/index.php/tarjetamedicamento/tarjetamedicamento
http · internal_ip_app · 271 hits
10.12.163.46/contabilidad/contabilidad_financiera/cuentacontable/index.php/cuentacontable/cuentacontable
http · internal_ip_app · 268 hits
melfi.prod.xetid.cu/planificacion/viaje/planeacion/index.php/viaje/index
http · xetid_web · 264 hits
10.12.163.35/configuracion/formatos/index.php/formatos/gestionarformatos
http · internal_ip_app · 263 hits
10.12.163.35/configuracion/subsistemas/index.php/gestsubsistemas/gestsubsistemas
http · internal_ip_app · 263 hits
10.12.163.40/logistica/inventario/entrada/entrada/index.php/apertura/gestapertura
http · internal_ip_app · 262 hits
melfi.prod.xetid.cu/ServiceProvider/ACS/
http · xetid_web · 258 hits
10.12.163.35/portal/index.php
http · internal_ip_app · 248 hits
facturacion.prod.xetid.cu/ServiceProvider/ACS/
http · xetid_web · 244 hits
10.12.163.46/configuracion/multimoneda/index.php/gestnommoneda/gestnommoneda
http · internal_ip_app · 236 hits
10.12.163.35/logistica/farmacia/farmacia/index.php/tarjetamedicamento/tarjetamedicamento
http · internal_ip_app · 235 hits
www.mindus.gob.cu/es/admin/modules
https · gobcu_web · 233 hits
10.12.163.35/logistica/inventario/movimiento/index.php/transferenciarea/transferenciarea
http · internal_ip_app · 224 hits
10.12.163.35/logistica/utiles/nomencladores/index.php/nomencladores/nomencladores
http · internal_ip_app · 221 hits
10.12.163.40/configuracion/nomgenerales/index.php/nomencladoresgenerales/nomencladoresgenerales
http · internal_ip_app · 218 hits
10.12.163.44/logistica/inventario/entrada/entrada/index.php/apertura/gestapertura
http · internal_ip_app · 217 hits
10.12.163.46/ServiceProvider/ACS/
http · internal_ip_app · 217 hits
10.12.163.36/portal/
http · internal_ip_app · 216 hits
facturacion.xetid.cu/seguridad/index.php/configaccesos/configaccesos
http · xetid_web · 211 hits
facturacion.xetid.cu/configuracion/clientesyproveedores/index.php/clientesyproveedores/clientesyproveedores
http · xetid_web · 200 hits
www.mindus.gob.cu/sites/default/files/Imagenes/Portada/Banner.jpg
https · gobcu_web · 200 hits
10.12.163.35/logistica/inventario/recuperaciones/index.php/submayorinventario/gestsubmayor
http · internal_ip_app · 195 hits
10.12.163.46/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · internal_ip_app · 193 hits
facturacion.prod.xetid.cu/configuracion/unidadmedida/index.php/gestunidadmedida/gestunidadmedida
http · xetid_web · 190 hits
10.12.163.46/configuracion/clientesyproveedores/index.php/clientesyproveedores/clientesyproveedores
http · internal_ip_app · 187 hits
10.12.163.44/logistica/distribucion/distribucion/index.php/distribucion/distribucion
http · internal_ip_app · 179 hits
www.mindus.gob.cu/es/noticias
https · gobcu_web · 175 hits
www.mindus.gob.cu/
https · gobcu_web · 174 hits
10.12.163.46/logistica/utiles/maestroproductos/index.php/gestgruposubgrupo/gestgruposubgrupo
http · internal_ip_app · 172 hits
bienestar-palacio.presidencia.gob.cu/syspalacio/es-ES/palacio/login/login,https://bienestar-palacio.presidencia.gob.cu/syspalacio/es-ES/palacio/5510944355e4553e9a36208023180070/Palacio_Rev.png,https:/
https · gobcu_web · 170 hits
melfi.prod.xetid.cu/logistica/utiles/maestroproductos/index.php/maestroproductos/maestroProductos
http · xetid_web · 164 hits
git-ausa.xetid.cu/seguridad/webservices/server.wsdl.php
http · xetid_web · 162 hits
10.12.163.44/seguridad/index.php/gestsist/gestsist
http · internal_ip_app · 161 hits
www.xetid.cu/
https · xetid_web · 154 hits
www.xetid.cu/images/favicon.png
https · xetid_web · 154 hits
10.12.163.35/configuracion/documento/index.php/documentos/documentos
http · internal_ip_app · 153 hits
10.12.163.46/seguridad/index.php/configuracion/configuracion
http · internal_ip_app · 152 hits
www.mindus.gob.cu/es/admin/structure/webform/manage/equipos_de_recreacion
https · gobcu_web · 147 hits
www.cubadebate.cu/
http · gobcu_web · 146 hits
10.12.163.35/seguridad/index.php/configaccesos/configaccesos
http · internal_ip_app · 145 hits
10.12.163.44/logistica/inventario/salida/salida/index.php/solicitudentrega/solicitudentrega
http · internal_ip_app · 142 hits
melfi.prod.xetid.cu/metadatos/estructura/index.php/estructura/gestionarEstructura
http · xetid_web · 141 hits
10.12.163.35/configuracion/fecha/index.php/gestionarfecha/gestionarfecha
http · internal_ip_app · 133 hits
10.12.163.40/seguridad/index.php/configuracion/configuracion
http · internal_ip_app · 132 hits
www.mindus.gob.cu/es/admin/reports/status
https · gobcu_web · 132 hits
10.12.163.44/seguridad/index.php/configaccesos/configaccesos
http · internal_ip_app · 131 hits
