Ollama in the Wild: A Longitudinal Measurement of Exposed Ollama LLM Endpoints at Internet Scale
Zuyao Xu, Xiang Li, Yuqi Qiu, Lu Sun
First author
Biography I am Zuyao Xu, a master’s student in Cybersecurity at Nankai University, advised by Xiang Li. My research focuses on DNS and Internet infrastructure security, Internet measurement, and LLM and agent security.
Zuyao Xu, Xiang Li, Yuqi Qiu, Lu Sun
First author
Zuyao Xu, Yuqi Qiu, Lu Sun, Fasheng Miao et al.
Equal contribution · first listed
Xiang Li, Yuqi Qiu, Zuyao Xu, Lu Sun, Fasheng Miao, Fubin Wu, Haixin Duan, Zheli Liu
Co-first author · third listed
Zuyao Xu, Yuyang Jia, Junwei Guan, Xiang Li, Kaiwen Shen, Zhiqiang Dong
Equal contribution · first listed
Zuyao Xu, Xiang Li, Fubin Wu, Yuqi Qiu, Lu Sun, Fasheng Miao
Xiang Li, Mingming Zhang, Zuyao Xu et al.
Third author
Internet Threat Analysis
DAF Vulnerability & Exploitation Challenge
Cybersecurity Practical Skills Competition
Big Data Security Analysis Competition
2023-2024 Outstanding Achievement Scholarship
2023-2024 Star of Excellence Scholarship
Awarded National Scholarship (¥10000, 2/120)
2023–2024 Science and Technology Innovation Scholarship
Mental Health Education System Based on Multi-modal Analysis
SDN Operations and Maintenance System
Agent-to-agent authentication and messaging; co-first author, third listed.
Longitudinal Internet measurement; first author.
Research on citation validity and agent communication.
Equal contribution, first listed.
Fast Internet-wide IPv4 and IPv6 Network Scanner.
BIND 9 resource exhaustion through DNSKEY handling; CVSS 3.1: 7.5.
An AI-assisted teaching website with voice, text, and natural-language interaction through the XiaoHui assistant.
A real-time wind power forecasting website combining TCN, LSTM, and MLP models.
A voice-enabled QQ chatbot built with YiriMirai, OpenAI, and Microsoft TTS APIs.
YOLOv8 object detection integrated with ROS2 communication.
Compiler construction course project: a C-like compiler and Intel 80x86 assembly interpreter with a PyQt6 graphical interface.
A university graduation project management system developed as a course project.
Operating systems course project: a kernel implementing basic interrupt handling, clock management, primitives, and resource management.
Star counts as of 2026-09-12
All repositoriesCo-author ·
An individual Internet-Draft for Agent Transfer Protocol (ATP): DNS-based agent discovery, authentication, and messaging.
Vienna, Austria ·
Participated in IETF 126 Hackathon as a member of the ATP demonstration team.
Resource exhaustion through DNSSEC record processing in BIND 9. Co-reported with Xiang Li and acknowledged by ISC.
ISC advisoryResource exhaustion via malformed DNSKEY handling in BIND 9. Acknowledged by ISC alongside Xiang Li.
ISC advisoryFast Internet-wide IPv4 and IPv6 Network Scanner. Cybersecurity Artifacts Impact Award, second place.
PDFCo-reporter of a high-severity vulnerability, November 2025.
Association coordination, technical exchange, and competition practice.
Chinese cryptography annual conference: 8 hours; national cryptography competition finals: 3 hours.