Most recent
navigate open esc close Corpus index built 2026-06-07 23:58 UTC

← All engagement records

Case study May 1, 2026

Yonsei University: 17 Cloud Subscriptions on Non-Standard Port, Free-Tier 200 OK

Sector
Universities
Country
yonsei

NuClide Research · 2026-05-01


Summary

Yonsei University (Seoul, South Korea) is running Ollama on non-standard port 5004 with 17 cloud proxy subscriptions matching the pattern seen at POSTECH, Shiv Nadar, Hanoi University, and RIT. minimax-m2.1:cloud returns 200 OK without credentials, confirming free-tier cloud quota drain. Local models include 75GB qwen3.5:122b and 65GB gpt-oss:120b (MXFP4), indicating a high-VRAM GPU server.


Infrastructure

FieldValue
IP1.233.220.117
rDNS,
OrgYonsei University
CountrySouth Korea
Open ports5004 (Ollama non-standard port, public)
TimezoneUTC+9 (Korea)

Cloud Proxy Subscriptions (17)

ModelProviderNotes
kimi-k2-thinking:cloudMoonshot AI1 trillion parameters
kimi-k2.6:cloudMoonshot AI,
kimi-k2.5:cloudMoonshot AI,
deepseek-v4-pro:cloudDeepSeek,
deepseek-v4-flash:cloudDeepSeek,
deepseek-v3.2:cloudDeepSeek671B
minimax-m2.7:cloudMiniMax,
minimax-m2.5:cloudMiniMax,
minimax-m2.1:cloudMiniMax200 OK confirmed, free-tier
minimax-m2:cloudMiniMax230B
glm-5.1:cloudZhipu AI,
glm-5:cloudZhipu AI,
glm-4.7:cloudZhipu AI,
glm-4.6:cloudZhipu AI355B
qwen3.5:cloudAlibaba397B
qwen3-coder-next:cloudAlibaba80B
nemotron-3-super:cloudNVIDIA,
gemini-3-flash-preview:cloudGoogle,

Local Models

ModelSize
qwen3.5:122b75 GB
qwen3.5:35b22 GB
qwen3.5:9b6 GB
gpt-oss:120b65 GB (MXFP4)

Findings

F1: Free-Tier Cloud Proxy 200 OK (CRITICAL)

minimax-m2.1:cloud returns full inference without credentials. 40 tokens consumed at operator expense:

curl -X POST http://1.233.220.117:5004/api/chat \
  -d '{"model":"minimax-m2.1:cloud","messages":[{"role":"user","content":"hi"}],"stream":false}'
# 200 OK - "Hi there! How can I help you today?"

F2: 17 Cloud Subscriptions on Non-Standard Port (CRITICAL)

Running Ollama on port 5004 instead of 11434. All 17 cloud subscriptions accessible.

F3: Same Cloud Bundle as POSTECH/Shiv Nadar/Hanoi/RIT (HIGH)

The 17-subscription cloud portfolio overlaps with the 18-bundle pattern seen at POSTECH (KR), Shiv Nadar (IN), Hanoi University (VN), and RIT (US). This is a distinct subset, shared Ollama Connect demonstration account or institutional bundle.

F4: Large Local Models (HIGH)

75GB and 65GB models accessible. Significant compute resources exposed to unauthenticated callers.


Disclosure

  • Discovered: 2026-05-01
  • Status: Pending outreach to Yonsei IT Security / KrCERT/CC