The security company Lava said on 22 October 2026 that it identified 32 B300 graphics processing units (GPUs), from NVIDIA's Blackwell Ultra generation, through publicly reachable monitoring endpoints whose Internet Protocol (IP) addresses geolocate to China. Lava says the finding raises questions about the hardware's location and supply chain but "does not establish that any export-control violation occurred."[1]
Lava says the endpoints ran DCGM Exporter, an NVIDIA tool that publishes GPU telemetry from NVIDIA Data Center GPU Manager (DCGM) for monitoring software such as Prometheus.[1, 2] Lava also says they disclosed GPU model names and device identifiers without authentication. Across several scans, it counted 4,724 unique NVIDIA GPUs at China-geolocated addresses, including 374 of four Blackwell models. Lava's initial analysis puts about 86% of the Blackwell GPUs in eight-GPU configurations, which it says fit compute servers. Another 1,156 were consumer RTX 4090s, which Lava says have been under US export restrictions since 2023.[1]
Lava cautions that IP geolocation is not definitive, since a proxy, virtual private network (VPN) or tunnel could relay traffic through an address in China while the hardware is elsewhere. It adds that one endpoint can report for several machines. The post lists no addresses and masks device identifiers in its example.[1]
Lava's earlier post, on 8 October 2026, covered four scans between March and May 2026 that found about 2,100 hosts serving DCGM Exporter metrics without authentication. They reported more than 12,000 unique GPUs, 1,967 of them at endpoints in China. That post also reported a flaw, CVE-2026-47483, that let unauthenticated requests crash the exporter.[3] NVIDIA's bulletin lists version 4.8.2 as the fix.[4]
Sources
Check or correct this page
Verification record
The digest below shows whether the text you are reading matches the published source. It does not show that the reporting is correct. The build computes it from this page's Markdown source and lists it in the site manifest.
99876f730341b01e1f57548026edd1030212619d3a1a6e03fd2f2ebbbfe4cb36
