MAC Address Lookup

Find the vendor (manufacturer) of any network device from its MAC address or its first six digits (the OUI), straight from the IEEE registry.

What does a MAC address lookup show?

A MAC address lookup finds the company the IEEE assigned the address's block to: the maker of the network card or of its chip. Enter a whole address (also called a MAC ID or hardware address) or just its first six digits (the OUI); the answer comes from the IEEE's own public registry, the source Wireshark's OUI lookup uses too, MA-M and MA-S blocks included.

It also reads what the address says about itself: whether it is randomized (a phone's private Wi-Fi address), a multicast group, a virtual machine's prefix or a router's virtual address. Use it as a MAC address finder for an unknown device on your Wi-Fi, a vendor checker for a network inventory, or to find the prefixes for a firewall or DHCP rule.

MAC address lookup of DC:A6:32:12:34:56: Raspberry Pi Trading Ltd, MA-L block, vendor and device bits, Cambridge on a mapMAC address lookup of DC:A6:32:12:34:56: Raspberry Pi Trading Ltd, MA-L block, vendor and device bits, Cambridge on a mapThe holderThe company the IEEE assigned this block to, and its country. A green mark means the registry names it.The blockThe assignment's type and size (MA-L, MA-M or MA-S) and the first and last address it covers.Vendor and device partsThe digits the vendor part covers: 6 for an MA-L block, 7 for MA-M, 9 for MA-S.The flag bitsThe first octet's two lowest bits: unicast or multicast, universal or local (randomized). Select one to flip it.
A lookup of DC:A6:32:12:34:56, a Raspberry Pi 4: the IEEE block holder, the block's size and range, and what the address's own bits say. Select a number to see what each part shows.

How do you read a MAC address?

A MAC address is 48 bits, written as 12 hex digits. The first half is the vendor part: the block the IEEE assigned to a company (the OUI). The second half identifies one network interface inside that block, and the company numbers those itself.

Two bits of the first octet change what the address means. The lowest, I/G, marks a group (multicast) address. The next, U/L, marks a locally administered address: one no maker assigned, which is why the second digit of a randomized address is always 2, 6, A or E.

Three addresses, three block sizes: the vendor part (cyan) is 24 bits in an MA-L block, 28 in an MA-M and 36 in an MA-S, and each names a different holder.

Block sizes: MA-L, MA-M, MA-S

Large companies buy a 24-bit block; smaller ones buy a slice of a block the IEEE split. A lookup has to match the longest prefix first, or every MA-M and MA-S address reads "IEEE Registration Authority" (v1 of this tool did that).

AssignmentVendor partAddressesIn the registryIEEE fee
MA-L, MA-Large (the classic OUI)24 bits16,777,21640,344$3,585
MA-M, MA-Medium28 bits1,048,5766,641$2,155
MA-S, MA-Small36 bits4,0967,235$910
IAB (no longer issued)36 bits4,0964,575—
CID, Company ID (local addresses)24 bits16,777,216221$910

The fee is the IEEE's one-time price for a public listing (October 2026). Keeping the company's name out of the listing costs a yearly fee on top.

Why does a MAC address show no vendor?

Almost always because the address was never assigned by a maker. Check the second hex digit first:

  • It's randomized

    A second digit of 2, 6, A or E means locally administered. iPhones, Android phones and Windows laptops show networks a random private Wi-Fi address instead of the hardware one, so there is no vendor to find.

  • The holder is private

    238 assignments are listed as Private: the company paid the IEEE to leave its name out. The lookup can say the block is taken, not by whom.

  • It's a split block

    Some 24-bit blocks hold thousands of small assignments. With only six digits the answer is the IEEE Registration Authority; enter all 12 to get the holder.

  • It isn't listed

    A universal address no one holds was mistyped, made up, or set by hand. Check it against the device's label.

Private Wi-Fi addresses on each system

SystemSettingDefault since
iPhone, iPad, Apple WatchPrivate Wi-Fi Address (Fixed, or Rotating every 2 weeks)iOS 14
AndroidUse randomized MACAndroid 10
Windows 10 and 11Random hardware addressesOff by default
macOSPrivate Wi-Fi addressmacOS 15 Sequoia

To find the real maker, look up the hardware address: on an iPhone it's Settings → General → About → Wi-Fi Address; on Android, Settings → About phone → Status (or turn randomization off for one network). MAC Address Generator makes random test addresses the same way phones do.

Which MAC addresses are special?

Some addresses mean more than their registry entry: protocol groups, virtual routers, and the default prefixes of virtual machines. The lookup above names them.

Sources: IANA Ethernet numbers, RFC 9542, IEEE 802.1Q, and each vendor's documentation.

AddressWhat it is
FF:FF:FF:FF:FF:FFBroadcastEvery device on the segment: ARP requests, DHCP discovery.
01:00:5E:00:00:00 – 01:00:5E:7F:FF:FFIPv4 multicastThe group's last 23 bits: 224.0.0.251 (mDNS) is 01:00:5E:00:00:FB.
33:33:xx:xx:xx:xxIPv6 multicastThe group's last 32 bits: ff02::1 (all nodes) is 33:33:00:00:00:01.
01:80:C2:00:00:00Spanning TreeSTP, RSTP and MSTP BPDUs between switches.
01:80:C2:00:00:02Slow ProtocolsLACP link aggregation and Ethernet OAM.
01:80:C2:00:00:03802.1XEAPOL frames for port and Wi-Fi authentication.
01:80:C2:00:00:0ELLDPNeighbours announcing their name and port.
01:00:0C:CC:CC:CCCisco CDP, VTP, DTPCisco's discovery and trunking protocols.
01:1B:19:00:00:00PTPIEEE 1588 clock synchronization.
00:00:5E:00:01:xxVRRPA virtual router's gateway address; xx is its router ID (RFC 9568).
00:00:0C:07:AC:xxHSRPCisco's virtual gateway; xx is the group number (RFC 2281).
00:50:56, 00:0C:29VMwareVirtual machines' network adapters.
08:00:27VirtualBoxVirtual machines' network adapters.
00:15:5DHyper-VVirtual machines' dynamic addresses.
52:54:00QEMU, KVMVirtual network cards (locally administered).
02:42:xx:xx:xx:xxDockerContainers on bridge networks up to Docker 27; the last four bytes are the container's IPv4 address.
02:00:00:00:00:00Android placeholderWhat apps get instead of the real address since Android 6.0.
00:00:5E:00:53:xxDocumentationReserved for examples (RFC 9542), like 192.0.2.0/24.

How do you find a device by its MAC address?

Find it in the list of devices your network has seen: your router's client list shows each device's name beside its MAC and IP address, and arp -a lists what your computer has talked to. Then look up all the MAC addresses at once with Bulk lookup above; the vendor usually gives each device away.

  1. 1

    List your neighbours

    Run arp -a (Windows, macOS) or ip neigh (Linux), or open your router's client list (DHCP leases). Router Login finds its admin page.

  2. 2

    Paste it all

    Copy the whole output into Bulk lookup. Addresses in any notation are found, with the IP on the same line.

  3. 3

    Read the vendors

    Espressif is usually a smart plug or bulb, Raspberry Pi a hobby server, Amazon an Echo or Fire TV. A randomized address is a phone or laptop.

  4. 4

    Still unsure?

    Turn devices off one at a time and see which address disappears, or check the IP with IP Lookup if it's a public one.

arp -a

Lists the IPv4 neighbours this PC has talked to recently, with their MAC addresses (Windows writes them with dashes).

Open Bulk lookup

How do you find your MAC address?

On the device itself: no website can read your MAC address, because it never leaves your local network. Every network interface has its own (Wi-Fi and Ethernet differ), and these commands show the hardware address the lookup needs.

getmac /v

Lists each adapter with its physical address. ipconfig /all shows the same as Physical Address.

Who owns the most MAC addresses?

Counted from the IEEE registry: full 24-bit blocks (16.7 million addresses each) per organization, grouped by name. Then where the world's blocks are registered, how the registry has grown, and the prefixes behind the devices on a home network.

The ten largest holders

Full 24-bit blocks (MA-L), 16,777,216 addresses each; the share is of all 40,344 MA-L blocks. Select a company to see every prefix it holds.

#OrganizationCountryMA-L blocksShare
1AppleUnited StatesUnited States1,5733.9%
2Huawei TechnologiesChinaChina1,4173.5%
3Cisco SystemsUnited StatesUnited States1,2583.1%
4Samsung ElectronicsSouth KoreaSouth Korea9132.3%
5Huawei DeviceChinaChina6701.7%
6IntelMalaysiaMalaysia6661.7%
7ZTEChinaChina5051.3%
8Texas InstrumentsUnited StatesUnited States4011.0%
9EspressifBritish Virgin IslandsBritish Virgin Islands3510.9%
10CommscopeUnited StatesUnited States3470.9%

Where the blocks are registered

58,748 assignments in 108 countries, by registered address

  1. United States17,34829.5%
  2. China12,72221.7%
  3. South Korea3,5586.1%
  4. Germany3,1485.4%
  5. Taiwan3,0365.2%
  6. Japan2,7194.6%
  7. United Kingdom1,6482.8%
  8. France1,3092.2%
  9. 100 other countries13,26022.6%
Places: GeoNames (CC BY 4.0)

How the registry has grown

The oldest archived copy of the IEEE listing, from June 1997, already names 1,435 of today's assignments. The registry now adds about 2,800 a year, and over the last ten years the smaller MA-M and MA-S blocks made up 39% of them.

assignments
59,016
organizations
32,798
countries
108

Assignments by block type

Prefixes of devices on a home network

The makers behind most of the addresses a router's client list shows. Each prefix opens in the lookup.

Newest assignments

Blocks that appeared in the IEEE listing between our syncs of Oct 14 – 18, 2026. We check it every month.

  1. 14:AB:7ECienaUnited StatesMA-L
  2. 1C:CC:CDTecno MobileHong KongMA-L
  3. 20:51:A5NetAppUnited StatesMA-L
  4. 24:91:23SZ DJI Ronin TechnologyChinaMA-L
  5. 40:53:B3Sunitec TechnologyChinaMA-L
  6. 48:13:18ZTEChinaMA-L
  7. 5C:AB:22:3Xiamen Joint TechChinaMA-M
  8. 5C:AB:22:6Shanghai Jiweijiu Intelligent TechnologyChinaMA-M

Is there a MAC address lookup API?

Yes, free and without a key: the same data as this page, as JSON. It takes an address or a prefix in any notation and answers with the holder, the block, the flags and the IPv6 interface ID.

Limits: 120 requests a minute per IP. CORS is open, so it works from a browser. Client libraries for Go, PHP, Rust, .NET and more are on GitHub.

One address
$ curl "https://dnsrobot.net/api/mac-lookup?mac=DC:A6:32:12:34:56"
{
  "vendor": "Raspberry Pi Trading Ltd",
  "oui": "DCA632",
  "countryCode": "GB",
  "registry": "MA-L",
  "blockSize": 16777216,
  "isLocal": false,
  "isMulticast": false,
  "kind": "vendor",
  "ipv6": { "linkLocal": "fe80::dea6:32ff:fe12:3456", … },
  …
}
Up to 500 addresses, or a vendor search
$ curl -X POST https://dnsrobot.net/api/mac-lookup \
    -H "Content-Type: application/json" \
    -d '{"macs": ["DC:A6:32:12:34:56", "00:15:5D:3A:1B:2C"]}'
$ curl "https://dnsrobot.net/api/mac-lookup?vendor=raspberry%20pi"

MAC address lookup questions

How do I look up a MAC address?

Type or paste it into the box at the top of this page, in any notation: B8:27:EB:12:34:56, B8-27-EB-12-34-56, b827.eb12.3456 or B827EB123456. The first six digits are enough to find the vendor. The result shows the company the IEEE assigned the block to, the block's size and range, and what the address's own bits say.

Can I identify a device by its MAC address?

Partly. The MAC address tells you who made the network interface, which often gives the device away: Espressif is a smart-home gadget, Raspberry Pi a small computer, Sonos a speaker. Its name comes from your own network instead: your router's client list or arp -a shows the hostname beside the address. It never tells you the owner or the location, and a randomized address names no maker at all.

Can a MAC address be traced to a location or a person?

No. A MAC address never leaves the local network: routers replace it at every hop, so a website or a remote server never sees it. Only the network's operator, such as your Wi-Fi's owner or an ISP, can link an address on their own network to a device or a customer.

Is there a WHOIS for MAC addresses?

Yes, in effect: the IEEE Registration Authority's public listing is the WHOIS of MAC addresses. It names the company each block of addresses is assigned to and the company's registered address, and this lookup searches it, the smaller MA-M and MA-S blocks included. It never names a device's owner: no registry records who bought a laptop or a phone.

What are the first six digits of a MAC address?

The OUI (Organizationally Unique Identifier): the block the IEEE assigned to a company. In MA-M and MA-S assignments the vendor part is longer (7 or 9 digits), because the IEEE split those 24-bit blocks between several companies. The remaining digits are numbered by the company for each interface.

Why does my MAC address show as randomized or with no vendor?

Its second hex digit is 2, 6, A or E, so it is locally administered: your phone or laptop made it up for Wi-Fi privacy (Private Wi-Fi Address on iPhone, randomized MAC on Android, random hardware addresses on Windows). Look up the hardware address from the device's About screen instead.

Why do other tools say "IEEE Registration Authority"?

Because they stop at the first six digits. The IEEE split some 24-bit blocks into 16 MA-M or 4,096 MA-S assignments for smaller companies, and lists the block itself under its own name. This lookup matches the longest prefix first, so it names the company that actually holds the address.

Can a MAC address be changed?

Yes. The hardware address is set at the factory, but every major system can use a different one: randomized Wi-Fi addresses, a value set in the adapter's settings, or ip link set dev eth0 address … on Linux. That is why a MAC address proves nothing about a device's identity.

Is a MAC address the same as an IP address?

No. A MAC address identifies a network interface on the local network and stays (mostly) the same wherever the device goes; an IP address identifies the device on a network and changes with it. ARP links the two on a LAN. To look up an IP address, use IP Lookup.

How can I look up many MAC addresses at once?

Open Bulk lookup and paste up to 5,000 addresses, or the raw output of arp -a, ip neigh, a DHCP lease list or a switch's MAC table. It finds every address in any notation, keeps the IP from the same line, and exports the results as CSV.

How do I find every MAC prefix a company owns?

Use Search by vendor, a reverse MAC lookup: type a company name, like Raspberry Pi or Espressif, and it lists every prefix the IEEE assigned to it, with the block sizes. Large makers hold hundreds, so checking one well-known prefix misses most of their devices. Copy them as a list or as a Wireshark display filter.

How up to date is the vendor database, and can I download it?

It is the IEEE Registration Authority's public listing (MA-L, MA-M, MA-S, IAB and CID). The IEEE updates it daily; we sync it every month and show the date under the page title. The IEEE publishes the full OUI lists as text and CSV files at standards-oui.ieee.org, and our free API answers any address or prefix.

Missing something?Suggest a feature or a new tool