Most recent
navigate open esc close Corpus index built 2026-06-07 23:58 UTC

← All engagement records

Case study May 1, 2026

University of Newcastle, Australia: DeepSeek Cloud Proxy + RAG Pipeline

Sector
Universities
Country
newcastle

NuClide Research · 2026-05-01


Summary

University of Newcastle (Australia, Callaghan campus) server with deepseek-v4-pro:cloud cloud proxy subscription and mxbai-embed-large:latest embedding model indicating an active RAG pipeline. Raw Ollama port publicly accessible, no authentication.


Infrastructure

FieldValue
IP157.85.107.12
OrgUniversity of Newcastle, Australia, Callaghan campus
CountryAustralia
Open ports11434 (Ollama, public)

Models

ModelSizeNotes
deepseek-v4-pro:cloud0 GB☁️ Cloud proxy, DeepSeek API
qwen3.5:35b22 GBLocal
qwen2.5:32b18 GBLocal
qwen3.5:9b6 GBLocal
mxbai-embed-large:latest0 GBEmbedding, RAG pipeline

mxbai-embed-large is a high-performance text embedding model used in RAG (retrieval-augmented generation) pipelines. Its presence alongside large language models confirms this Ollama instance is backing a document retrieval system.


Findings

F1, Unauthenticated Ollama API (CRITICAL): Port 11434 publicly accessible.
F2, DeepSeek Cloud Proxy (HIGH): deepseek-v4-pro:cloud accessible, 401 returned.
F3, RAG Pipeline Injection Surface (HIGH): Embedding model present, model injection via CVE-2025-63389 affects documents served via RAG.


Disclosure

  • Discovered: 2026-05-01
  • Status: Pending outreach to UoN IT Security