MAC Address Lookup

Find the vendor (manufacturer) of any network device from its MAC address or its first six digits (the OUI), straight from the IEEE registry.

What does a MAC address lookup show?

A MAC address lookup finds the company the IEEE assigned the address's block to: the maker of the network card or of its chip. Enter a whole address (also called a MAC ID or hardware address) or just its first six digits (the OUI); the answer comes from the IEEE's own public registry, the source Wireshark's OUI lookup uses too, MA-M and MA-S blocks included.

It also reads what the address says about itself: whether it is randomized (a phone's private Wi-Fi address), a multicast group, a virtual machine's prefix or a router's virtual address. Use it as a MAC address finder for an unknown device on your Wi-Fi, a vendor checker for a network inventory, or to find the prefixes for a firewall or DHCP rule.

MAC address lookup of DC:A6:32:12:34:56: Raspberry Pi Trading Ltd, MA-L block, vendor and device bits, Cambridge on a mapMAC address lookup of DC:A6:32:12:34:56: Raspberry Pi Trading Ltd, MA-L block, vendor and device bits, Cambridge on a mapThe holderThe company the IEEE assigned this block to, and its country. A green mark means the registry names it.The blockThe assignment's type and size (MA-L, MA-M or MA-S) and the first and last address it covers.Vendor and device partsThe digits the vendor part covers: 6 for an MA-L block, 7 for MA-M, 9 for MA-S.The flag bitsThe first octet's two lowest bits: unicast or multicast, universal or local (randomized). Select one to flip it.
A lookup of DC:A6:32:12:34:56, one of Raspberry Pi's prefixes: the IEEE block holder, the block's size and range, and what the address's own bits say. Select a number to see what each part shows.

How do you read a MAC address?

A MAC address is 48 bits, written as 12 hex digits. The first half is the vendor part: the block the IEEE assigned to a company (the OUI). The second half identifies one network interface inside that block, and the company numbers those itself.

Two bits of the first octet change what the address means. The lowest, I/G, marks a group (multicast) address. The next, U/L, marks a locally administered address: one no maker assigned, which is why the second digit of a randomized address is always 2, 6, A or E.

Three addresses, three block sizes: the vendor part (cyan) is 24 bits in an MA-L block, 28 in an MA-M and 36 in an MA-S, and each names a different holder.

Block sizes: MA-L, MA-M, MA-S

Large companies buy a 24-bit block; smaller ones buy a slice of a block the IEEE split. A lookup has to match the longest prefix first, or every MA-M and MA-S address reads "IEEE Registration Authority".

AssignmentVendor partAddressesIn the registryIEEE fee
MA-L, MA-Large (the classic OUI)24 bits16,777,21640,344$3,585
MA-M, MA-Medium28 bits1,048,5766,641$2,155
MA-S, MA-Small36 bits4,0967,235$910
IAB (no longer issued)36 bits4,0964,575—
CID, Company ID (local addresses)24 bits16,777,216221$910

The fee is the IEEE's one-time price for a public listing (October 2026). Keeping the company's name out of the listing costs a yearly fee on top.

Why does a MAC address show no vendor?

Almost always because the address was never assigned by a maker. Check the second hex digit first:

  • It's randomized

    A second digit of 2, 6, A or E means locally administered. iPhones and Android phones (and Windows laptops with Random hardware addresses turned on) show networks a random private Wi-Fi address instead of the hardware one, so there is no vendor to find.

  • The holder is private

    238 assignments are listed as Private: the company paid the IEEE to leave its name out. The lookup can say the block is taken, not by whom.

  • It's a split block

    The IEEE split some 24-bit blocks into 16 MA-M or 4,096 MA-S assignments for smaller companies. Tools that stop at six digits answer "IEEE Registration Authority"; this lookup matches the longest prefix, so enter all 12 digits to get the holder.

  • It isn't listed

    A universal address no one holds was mistyped, made up, or set by hand. Check it against the device's label.

Private Wi-Fi addresses on each system

SystemSettingDefault since
iPhone, iPad, Apple WatchPrivate Wi-Fi Address (Fixed or Rotating since iOS 18)iOS 14, watchOS 7
AndroidUse randomized MACAndroid 10
Windows 10 and 11Random hardware addressesOff by default
macOSPrivate Wi-Fi addressmacOS 15 Sequoia

To find the real maker, look up the hardware address: on an iPhone it's Settings → General → About → Wi-Fi Address; on Android, Settings → About phone → Status (or turn randomization off for one network). MAC Address Generator makes random test addresses the same way phones do.

Which MAC addresses are special?

Some addresses mean more than their registry entry: protocol groups, virtual routers, and the default prefixes of virtual machines. The lookup above names them.

Sources: IANA Ethernet numbers, RFC 9542, IEEE 802.1Q, and each vendor's documentation.

AddressWhat it is
FF:FF:FF:FF:FF:FFBroadcastEvery device on the segment: ARP requests, DHCP discovery.
01:00:5E:00:00:00 – 01:00:5E:7F:FF:FFIPv4 multicastThe group's last 23 bits: 224.0.0.251 (mDNS) is 01:00:5E:00:00:FB.
33:33:xx:xx:xx:xxIPv6 multicastThe group's last 32 bits: ff02::1 (all nodes) is 33:33:00:00:00:01.
01:80:C2:00:00:00Spanning TreeSTP, RSTP and MSTP BPDUs between switches.
01:80:C2:00:00:02Slow ProtocolsLACP link aggregation and Ethernet OAM.
01:80:C2:00:00:03802.1XEAPOL frames for 802.1X port authentication.
01:80:C2:00:00:0ELLDPNeighbours announcing their name and port.
01:00:0C:CC:CC:CCCisco CDP, VTP, DTPCisco's discovery and trunking protocols.
01:1B:19:00:00:00PTPIEEE 1588 clock synchronization.
00:00:5E:00:01:xxVRRPA virtual router's gateway address; xx is its router ID (RFC 9568).
00:00:0C:07:AC:xxHSRPCisco's virtual gateway; xx is the group number (RFC 2281).
00:50:56, 00:0C:29VMwareVirtual machines' network adapters.
08:00:27VirtualBoxVirtual machines' network adapters.
00:15:5DHyper-VVirtual machines' dynamic addresses.
52:54:00QEMU, KVMVirtual network cards (locally administered).
02:42:xx:xx:xx:xxDockerContainers on bridge networks up to Docker 27; the last four bytes are the container's IPv4 address.
02:00:00:00:00:00Android placeholderWhat apps get instead of the real address since Android 6.0.
00:00:5E:00:53:xxDocumentationReserved for examples (RFC 9542), like 192.0.2.0/24.

How do you find a device by its MAC address?

Find it in the list of devices your network has seen: your router's client list shows each device's name beside its MAC and IP address, and arp -a lists what your computer has talked to. Then look up all the MAC addresses at once with Bulk lookup above; the vendor usually gives each device away.

  1. 1

    List your neighbours

    Run arp -a (Windows, macOS) or ip neigh (Linux), or open your router's client list (DHCP leases). Router Login finds its admin page.

  2. 2

    Paste it all

    Copy the whole output into Bulk lookup. Addresses in any notation are found, with the IP on the same line.

  3. 3

    Read the vendors

    Espressif is usually a smart plug or bulb, Raspberry Pi a hobby server, Amazon an Echo or Fire TV. A randomized address is a phone or laptop.

  4. 4

    Still unsure?

    Turn devices off one at a time and see which address disappears, or check the IP with IP Lookup if it's a public one.

What a device from each vendor probably is

  • SonosProbably: smart speaker
  • IntelProbably a network chip by Intel inside another brand's device. Its chips go into: computer or server
  • EspressifProbably a network chip by Espressif inside another brand's device. Its chips go into: smart plug, smart light, or smart-home device
  • AppleCould be: phone, tablet, computer, streaming player, or smart speaker
The line the lookup shows under the holder, from what each company makes according to its own website. A chip maker's prefix names the network chip, not the brand on the device.
arp -a

Lists the IPv4 neighbours this PC has talked to recently, with their MAC addresses (Windows writes them with dashes).

Open Bulk lookup

How do you find your MAC address?

On the device itself: no website can read your MAC address directly, because routers replace it at every hop. Every network interface has its own (Wi-Fi and Ethernet differ), and these commands show the hardware address the lookup needs.

getmac /v

Lists each adapter with its physical address. ipconfig /all shows the same as Physical Address.

Who owns the most MAC addresses?

Counted from the IEEE registry: full 24-bit blocks (16.7 million addresses each) per organization, grouped by name. Then where the world's blocks are registered, how the registry has grown, and the prefixes behind the devices on a home network.

The ten largest holders

Full 24-bit blocks (MA-L), 16,777,216 addresses each; the share is of all 40,344 MA-L blocks. Select a company to see every prefix it holds.

#OrganizationCountryMA-L blocksShare
1AppleUnited StatesUnited States1,5733.9%
2Huawei TechnologiesChinaChina1,4173.5%
3Cisco SystemsUnited StatesUnited States1,2583.1%
4Samsung ElectronicsSouth KoreaSouth Korea9132.3%
5Huawei DeviceChinaChina6701.7%
6IntelMalaysiaMalaysia6661.7%
7ZTEChinaChina5051.3%
8Texas InstrumentsUnited StatesUnited States4011.0%
9EspressifBritish Virgin IslandsBritish Virgin Islands3510.9%
10CommscopeUnited StatesUnited States3470.9%

Where the blocks are registered

58,748 assignments in 108 countries, by registered address

  1. United States17,34829.5%
  2. China12,72221.7%
  3. South Korea3,5586.1%
  4. Germany3,1485.4%
  5. Taiwan3,0365.2%
  6. Japan2,7194.6%
  7. United Kingdom1,6482.8%
  8. France1,3092.2%
  9. 100 other countries13,26022.6%
Places: GeoNames (CC BY 4.0)

How the registry has grown

The oldest archived copy of the IEEE listing, from June 1997, already names 1,435 of today's assignments. The registry now adds about 2,800 a year, and over the last ten years the smaller MA-M and MA-S blocks made up 39% of them.

assignments
59,016
organizations
32,798
countries
108

Assignments by block type

Prefixes of devices on a home network

Makers often behind the addresses a router's client list shows. Each prefix opens in the lookup.

Newest assignments

Blocks that appeared in the IEEE listing between our syncs of Oct 14 – 18, 2026.

  1. 14:AB:7ECienaUnited StatesMA-L
  2. 1C:CC:CDTecno MobileHong KongMA-L
  3. 20:51:A5NetAppUnited StatesMA-L
  4. 24:91:23SZ DJI Ronin TechnologyChinaMA-L
  5. 40:53:B3Sunitec TechnologyChinaMA-L
  6. 48:13:18ZTEChinaMA-L
  7. 5C:AB:22:3Xiamen Joint TechChinaMA-M
  8. 5C:AB:22:6Shanghai Jiweijiu Intelligent TechnologyChinaMA-M

Is there a MAC address lookup API?

Yes, free and without a key. API v2's /mac takes an address or a prefix in any notation and answers with the holder, the block and the month it was first listed, the flags, what the device probably is and the IPv6 interface ID, as JSON; its documentation lists every field. The older /api/mac-lookup still answers too, and takes up to 500 addresses in one request.

Limits: 120 requests a minute per IP. CORS is open, so it works from a browser.

Download the MAC vendor list

Every assignment in the IEEE registry in one file: 59,016 prefixes, each with its block, organization, country and the month it was first listed.

Source: the IEEE Registration Authority's public listing, synced October 18, 2026. The first-listed months are ours, read from the Wayback Machine's monthly copies of that listing.

One address (API v2)
$ curl "https://dnsrobot.net/api/v2/mac?address=DC:A6:32:12:34:56"
{
  "kind": "vendor",
  "vendor": { "name": "Raspberry Pi Trading Ltd", "country": "GB", … },
  "deviceKind": { "band": "device", "devices": ["single-board-computer"], … },
  "assignment": {
    "prefix": "DC:A6:32",
    "block": "MA-L",
    "size": 16777216,
    "firstListed": { "on": "2019-03-28", … },
    …
  },
  "flags": { "multicast": false, "locallyAdministered": false, … },
  "ipv6": { "linkLocal": "fe80::dea6:32ff:fe12:3456", … },
  …
}
Up to 500 addresses, or a vendor search
$ curl -X POST https://dnsrobot.net/api/mac-lookup \
    -H "Content-Type: application/json" \
    -d '{"macs": ["DC:A6:32:12:34:56", "00:15:5D:3A:1B:2C"]}'
$ curl "https://dnsrobot.net/api/v2/mac/vendors?q=raspberry%20pi"

MAC address lookup questions

How do I look up a MAC address?

Type or paste it into the box at the top of this page, in any notation: B8:27:EB:12:34:56, B8-27-EB-12-34-56, b827.eb12.3456 or B827EB123456. The first six digits are usually enough to find the vendor (seven or nine for MA-M and MA-S blocks). The result shows the company the IEEE assigned the block to, the block's size and range, and what the address's own bits say.

Can I identify a device by its MAC address?

Partly. The MAC address tells you who made the network interface, which often gives the device away: Espressif is a smart-home gadget, Raspberry Pi a small computer, Sonos a speaker. Its name comes from your own network instead: your router's client list shows the device's name beside the address. A randomized address names no maker at all.

Can a MAC address be traced to a location or a person?

Not from the address alone. Routers replace a device's MAC address at every hop, so websites don't see it, except from older devices whose IPv6 address still embeds it (RFC 8064 names location tracking as the risk). A Wi-Fi router's own address is different: Google's location service maps access points (add _nomap to the network name to opt out). Only the network's operator can link an address to a customer.

Is there a WHOIS for MAC addresses?

Yes, in effect: the IEEE Registration Authority's public listing is the WHOIS of MAC addresses. It names the company each block of addresses is assigned to and the company's registered address, and this lookup searches it, the smaller MA-M and MA-S blocks included. Unlike a domain's WHOIS it has no dates: the first-listed month the lookup shows comes from archived copies of the listing.

What are the first six digits of a MAC address?

The OUI (Organizationally Unique Identifier): the block the IEEE assigned to a company. In MA-M and MA-S assignments the vendor part is longer (7 or 9 digits), because the IEEE split those 24-bit blocks between several companies. The remaining digits are numbered by the company for each interface.

Does a private Wi-Fi address change?

It depends on the system. An iPhone, iPad or Mac uses a different address on each network; since iOS 18 and macOS 15, Fixed keeps it and Rotating changes it every two weeks (the default on open or weakly secured networks). Android 10 and later keep one random address per network until a factory reset. Erasing an iPhone or resetting its network settings gives it new addresses.

Can a MAC address be changed?

Yes. The hardware address is set at the factory, but every major system can use a different one: randomized Wi-Fi addresses, a value set in the adapter's settings, or ip link set dev eth0 address … on Linux. That is why a MAC address proves nothing about a device's identity.

How can I look up many MAC addresses at once?

Open Bulk lookup and paste up to 5,000 addresses, or the raw output of arp -a, ip neigh, a DHCP lease list or a switch's MAC table. It finds every address in any notation, keeps the IP from the same line, and exports the results as CSV.

How do I find every MAC prefix a company owns?

Use Search by vendor, a reverse MAC lookup: type a company name, like Raspberry Pi or Espressif, and it lists every prefix the IEEE assigned to it, with the block sizes. Large makers hold hundreds, so checking one well-known prefix misses most of their devices. Copy them as a list or as a Wireshark display filter.

How up to date is the vendor database, and can I download it?

It is the IEEE Registration Authority's public listing (MA-L, MA-M, MA-S, IAB and CID). The IEEE updates it daily; the date of our last sync is under the page title. Download our list of every assignment as CSV or JSON, or the IEEE's own text and CSV files at standards-oui.ieee.org. Our free API answers any address or prefix.

Is a MAC address unique?

A universal one is meant to be: the IEEE assigns each block to one organization, and every address made from it is intended to be globally unique. The IEEE doesn't guarantee there are no duplicates, though, because that depends on each maker using its block properly. A locally administered address (second digit 2, 6, A or E), like the randomized ones phones use on Wi-Fi, is chosen on the device and only has to be unique on its own network.

What is a MAC vendor?

The organization the IEEE assigned the address's block to: the company named by its first six digits, or by seven or nine for the smaller MA-M and MA-S blocks. Some show as Private: the company pays the IEEE a yearly fee to keep its name and address out of the public listing, so a lookup can say the block is taken but not by whom.

Missing something?Suggest a feature or a new tool