TodayToday's edition
NVIDIA B300 GPUs appeared on open monitoring endpoints with Chinese IP addresses, reportedly linked to China Telecom. IP data shows visibility, not ownership or an export violation.
2 min readAI-assisted
NVIDIA's HGX platform product image, which covers the B300 generation. It is not Lava's data: Lava has not said what hardware it found or where it sits.
Image: NVIDIA
Source · Press image from the NVIDIA website, used for news reporting.
Israeli security firm Lava said it identified 32 NVIDIA B300 GPUs through unauthenticated monitoring endpoints with IP addresses geolocated to China, in research it published on Oct. 22.
DigiTimes, citing the same finding, reported that the endpoints were linked to China Telecom, a state-owned carrier. The B300 belongs to NVIDIA's Blackwell Ultra generation, and its sale to China is barred under US export controls. Lava's own write-up does not name China Telecom; that attribution comes from press coverage that Voltgrid could read only as a summary.
Nobody seized hardware. Lava found the GPUs because operators left NVIDIA's DCGM Exporter, a tool that publishes GPU telemetry over HTTP, open to the internet. The endpoints showed exact model names and unique device identifiers without a login, which let Lava count individual GPUs. The 32 B300s were part of a larger China-geolocated inventory: across several scans, Lava counted 4,724 unique NVIDIA GPUs on such endpoints.
Lava also listed 342 other Blackwell-family GPUs on China-geolocated endpoints: 78 RTX PRO 6000 Blackwell Server Edition, 112 RTX PRO 5000 72GB Blackwell and 152 GeForce RTX 5090. About 86% of the 374 Blackwell GPUs in total were reported in eight-GPU configurations, which Lava said is consistent with compute servers. It also counted 1,156 RTX 4090 cards and 160 RTX 4090D cards.
Lava's scan found 32 B300 GPUs among 374 Blackwell GPUs on China-geolocated endpoints; Lava says IP geolocation is not definitive.
Illustration (AI-generated)
Lava itself cautions that IP geolocation is not definitive. A proxy, VPN or tunnel can relay traffic through a Chinese address while the hardware sits elsewhere. The company said the discovery raises questions about the location and supply chain of the hardware but does not establish that any export-control violation occurred. TokenPost made the same point, noting that the data shows what a monitoring service exposed, not who owns a device or how it got there.
For the supply chain, the signal is about visibility rather than volume. The 32 B300s are a small slice of the 4,724 GPUs Lava counted on China-geolocated endpoints. What changes is that a third party could count export-controlled parts from outside, using an open monitoring port, with no access to any facility. Voltgrid News reported earlier on NVIDIA's China GPU order.
Lava's earlier work, published on Oct. 8, found roughly 2,100 hosts exposing DCGM Exporter metrics and more than 12,000 unique GPUs across nearly 300 organizations, an estimated $100 million in hardware. That research led to CVE-2026-47483, a denial-of-service flaw rated CVSS 8.2 (High) that NVIDIA addressed in DCGM Exporter version 4.8.2. Lava said many exposed services sat on customer infrastructure at neoclouds including Voltage Park, Lambda, Northern Data and DigitalOcean, and that the providers said customers had mostly deployed and exposed them.
Across Lava's original global sample, nearly 60% of GPUs reported 0% utilization at the moment of observation. Lava called these snapshots, not a measure of the wider AI industry.
None of the reports Voltgrid read carries a comment from NVIDIA or China Telecom, or a statement from a US regulator. Who owns the 32 B300s, when they were shipped and by whom remain unanswered. Watch for any NVIDIA or US government response, and for whether the operators close the open ports.
