{"id":"https://openalex.org/W7138892754","doi":"https://doi.org/10.1109/globecom59602.2025.11432775","title":"Exposed in the Pool: An Analysis of IPv6 NTP Server Scanning Activities","display_name":"Exposed in the Pool: An Analysis of IPv6 NTP Server Scanning Activities","publication_year":2025,"publication_date":"2025-12-08","ids":{"openalex":"https://openalex.org/W7138892754","doi":"https://doi.org/10.1109/globecom59602.2025.11432775"},"language":null,"primary_location":{"id":"doi:10.1109/globecom59602.2025.11432775","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom59602.2025.11432775","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2025 - 2025 IEEE Global Communications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5130118903","display_name":"Liang Zhao","orcid":null},"institutions":[{"id":"https://openalex.org/I200475212","display_name":"The Graduate University for Advanced Studies, SOKENDAI","ror":"https://ror.org/0516ah480","country_code":"JP","type":"education","lineage":["https://openalex.org/I200475212"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Liang Zhao","raw_affiliation_strings":["Graduate University for Advanced Studies,Tokyo,Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate University for Advanced Studies,Tokyo,Japan","institution_ids":["https://openalex.org/I200475212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102837481","display_name":"Satoru Kobayashi","orcid":"https://orcid.org/0000-0003-1017-0938"},"institutions":[{"id":"https://openalex.org/I163770644","display_name":"Okayama University","ror":"https://ror.org/02pc6pc55","country_code":"JP","type":"education","lineage":["https://openalex.org/I163770644"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Satoru Kobayashi","raw_affiliation_strings":["Okayama University,Okayama,Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Okayama University,Okayama,Japan","institution_ids":["https://openalex.org/I163770644"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101814201","display_name":"Kensuke Fukuda","orcid":"https://orcid.org/0000-0001-8372-2807"},"institutions":[{"id":"https://openalex.org/I4210110163","display_name":"Nippon Soken (Japan)","ror":"https://ror.org/01yk36x23","country_code":"JP","type":"company","lineage":["https://openalex.org/I4210110163"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kensuke Fukuda","raw_affiliation_strings":["NII/Sokendai,Tokyo,Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NII/Sokendai,Tokyo,Japan","institution_ids":["https://openalex.org/I4210110163"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3807","last_page":"3812"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.8001000285148621,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.8001000285148621,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.0406000018119812,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.034299999475479126,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.8234000205993652},{"id":"https://openalex.org/keywords/ipv6","display_name":"IPv6","score":0.7250999808311462},{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.6292999982833862},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5641999840736389},{"id":"https://openalex.org/keywords/router","display_name":"Router","score":0.48330000042915344}],"concepts":[{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.8234000205993652},{"id":"https://openalex.org/C84555802","wikidata":"https://www.wikidata.org/wiki/Q2551624","display_name":"IPv6","level":3,"score":0.7250999808311462},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.6292999982833862},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5641999840736389},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5565000176429749},{"id":"https://openalex.org/C2775896111","wikidata":"https://www.wikidata.org/wiki/Q642560","display_name":"Router","level":2,"score":0.48330000042915344},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4334999918937683},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.33959999680519104},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.28189998865127563},{"id":"https://openalex.org/C2779233093","wikidata":"https://www.wikidata.org/wiki/Q11103","display_name":"IPv4","level":4,"score":0.2694000005722046},{"id":"https://openalex.org/C137471899","wikidata":"https://www.wikidata.org/wiki/Q11381","display_name":"Local area network","level":2,"score":0.26409998536109924}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/globecom59602.2025.11432775","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom59602.2025.11432775","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2025 - 2025 IEEE Global Communications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6241006255149841}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W602727389","https://openalex.org/W2031801461","https://openalex.org/W2061133001","https://openalex.org/W2158060559","https://openalex.org/W2523049488","https://openalex.org/W2573146560","https://openalex.org/W2805572865","https://openalex.org/W2835471639","https://openalex.org/W2903549510","https://openalex.org/W2981181114","https://openalex.org/W4307010750","https://openalex.org/W4386365383","https://openalex.org/W4392964584","https://openalex.org/W4403981167"],"related_works":[],"abstract_inverted_index":{"The":[0],"NTP":[1,49,98,111,144,186],"Pool":[2,50,187],"project":[3],"has":[4],"become":[5],"a":[6],"critical":[7,199],"infrastructure":[8],"for":[9,79,156],"Internet":[10,56],"time":[11,45,94],"synchronization,":[12],"and":[13,21,76,88,113,131,152],"used":[14],"by":[15,24,34,64],"major":[16],"Linux":[17],"distributions,":[18],"router":[19],"firmware,":[20],"IoT":[22],"devices":[23],"default.":[25],"While":[26],"IPv6":[27,44,80,93,185,194],"servers":[28,46,61,95,145],"are":[29,62],"inherently":[30],"difficult":[31],"to":[32,38,54,104,190],"locate":[33],"Internet-wide":[35],"scanners":[36,139,166],"due":[37],"the":[39,48,55,97,137,165,191,198],"vast":[40],"address":[41],"space,":[42],"public":[43],"in":[47,96,197],"can":[51,140],"be":[52],"exposed":[53],"through":[57],"GeoDNS.":[58],"As":[59],"these":[60],"operated":[63],"volunteers,":[65],"they":[66],"may":[67],"have":[68],"limited":[69],"security":[70,196],"measures,":[71],"making":[72],"them":[73],"particularly":[74],"vulnerable":[75],"attractive":[77],"targets":[78],"scanning":[81,90,132,169,182],"activities.":[82],"In":[83,158],"this":[84],"paper,":[85],"we":[86],"monitor":[87],"analyze":[89],"activities":[91,183],"targeting":[92,184],"Pool.":[99],"We":[100,134],"present":[101],"an":[102],"approach":[103],"distinguish":[105],"between":[106],"benign":[107],"scans":[108,115],"from":[109,116],"legitimate":[110],"clients":[112],"suspicious":[114,138],"potentially":[117],"malicious":[118],"scanners.":[119],"Our":[120,176],"analysis":[121],"spans":[122],"several":[123,150],"metrics":[124],"including":[125],"source,":[126],"traffic":[127],"composition,":[128],"target":[129],"distribution,":[130],"strategies.":[133],"find":[135],"that":[136,164,171],"discover":[141],"newly":[142],"deployed":[143],"across":[146],"different":[147],"regions":[148],"within":[149],"hours":[151],"probe":[153],"neighboring":[154],"addresses":[155],"reconnaissance.":[157],"addition,":[159],"our":[160],"honeynet":[161],"observations":[162],"suggest":[163],"employ":[167],"adaptive":[168],"strategies":[170],"focus":[172],"on":[173],"responsive":[174],"targets.":[175],"findings":[177],"provide":[178],"comprehensive":[179],"insights":[180],"into":[181],"servers,":[188],"contributing":[189],"understanding":[192],"of":[193],"network":[195],"infrastructure.":[200]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-03-20T00:00:00"}