🔍 MAC Address Vendor Lookup

🔍 MAC Address Input

Supports various formats: colon, dash, or no separators

📝 Common Examples

00:16:CB:xx:xx:xx
00:0C:29:xx:xx:xx
08:00:27:xx:xx:xx
00:50:F2:xx:xx:xx

📋 Accepted Formats

Colon separated: 00:1B:63:84:45:E6
Dash separated: 00-1B-63-84-45-E6
Dot separated: 001B.6384.45E6
No separators: 001B63844SE6
Case insensitive: Both upper and lower case accepted

🏢 Vendor Information

Normalized MAC Address:
{{ result.normalized }}
OUI: {{ result.oui }}
✅ Vendor Found
{{ result.vendor }}
📍 {{ result.details.country }}
Registry: {{ result.details.registry }}
⚠️ Vendor Not Found
This MAC address is not in our OUI database. It may be:
  • A locally administered address
  • From a small or new manufacturer
  • A private or custom OUI assignment

🔬 Address Analysis

Type: {{ result.analysis.type }}
Administration: {{ result.analysis.locally_administered ?'Local' :'Universal' }}
🖥️ Virtual Environment Detected
This MAC address suggests a virtual machine or virtualized network interface.
📝 Technical Notes
  • • {{ note }}

⚡ Actions

⚠️ {{ error }}

ℹ️ About MAC Address Vendor Lookup

MAC Address Vendor Lookup identifies the likely manufacturer behind an Ethernet, Wi-Fi, Bluetooth, or virtual network interface by normalizing a 48-bit MAC address and checking its assignment prefix. Vendor prefixes are assigned through the IEEE Registration Authority, which publishes MAC Address Block Large (MA-L), Medium (MA-M), Small (MA-S), and related registry data.

Use this lookup when you need to identify an unknown device on a LAN, investigate a DHCP lease, label switch CAM table entries, review Wi-Fi client lists, triage incident-response notes, or distinguish physical adapters from common virtual interfaces. The result is useful network context, not proof of the current device owner.

How MAC vendor lookup works: a standard EUI-48 MAC address has six octets such as 00:16:CB:12:34:56. A classic OUI or MA-L match uses the first three octets (00:16:CB) and the remaining three octets are assigned by that organization. IEEE's EUI, OUI, and CID guidelines also define MA-M and MA-S blocks, where more than 24 prefix bits can be significant.

  • Accepted input: 00:16:CB:12:34:56, 00-16-CB-12-34-56, 0016.CB12.3456, or 0016CB123456.
  • Example lookup: 00:16:CB:12:34:56 normalizes to 00:16:CB:12:34:56, extracts OUI 00:16:CB, and can identify Apple when that prefix is present in the database.
  • Virtual example: 08:00:27:11:22:33 is commonly associated with VirtualBox virtual network adapters.

Address type details: the first octet contains two important flag bits. The group bit separates individual/unicast addresses from multicast group addresses, and the local bit separates globally administered identifiers from locally administered addresses. The RFC 7042 overview of IEEE 802 parameters describes these bits for EUI-48 MAC addresses.

  • Universal unicast: usually the best case for vendor lookup because the address comes from an IEEE-assigned block.
  • Locally administered: often generated by operating systems, hypervisors, containers, privacy randomization, or manual configuration; vendor matches may be misleading.
  • Multicast or broadcast: identifies a group or all devices on a link, so it is not a physical device vendor lookup.

Limitations: MAC addresses can be randomized, spoofed, recycled across virtual interfaces, or hidden behind private assignments. A missing match can mean the prefix is absent from this tool's database, the address is locally administered, or the assignment requires a more specific MA-M or MA-S lookup. For authoritative registry checks, compare results with the IEEE public listings, including the MA-L CSV, MA-M CSV, and MA-S CSV.

API Usage Example:

POST /api/tools/osint/mac-vendor-lookup
Content-Type: application/json

{
    "mac_address": "00:50:56:12:34:56"
}
Ready