Using XMap to probe port 11434 across the full IPv4 space daily from 2025-02-14 to 2026-02-13 over 362 observed days, a Nankai University team found 152,137 cumulative exposed Ollama endpoints, with daily alive endpoints rising from 10,473 to 16,059 (+53.3%), 26.4% of IPs appearing on a single day, only 0.43%–2.90% of below-fix IPs upgrading in place across five CVE cutoffs, the top five countries/regions holding about 70% of weighted observations, and the top five ASNs all cloud or hosting providers, complemented by PTR and port-443 TLS probing of operational characteristics.
Using XMap to probe port 11434 across the full IPv4 space daily from 2025-02-14 to 2026-02-13 over 362 observed days, a Nankai University team found 152,137 cumulative exposed Ollama endpoints, with daily alive endpoints rising from 10,473 to 16,059 (+53.3%), 26.4% of IPs appearing on a single day, only 0.43%–2.90% of below-fix IPs upgrading in place across five CVE cutoffs, the top five countries/regions holding about 70% of weighted observations, and the top five ASNs all cloud or hosting providers, complemented by PTR and port-443 TLS probing of operational characteristics.