Does anyone know of a database that lists the range of MAC addresses that are assigned to each particular brand of router? I would like to use this information for fingerprinting.

I know I can find the manufacturer given the OUI of the MAC address, but I do not know how to find the exact router version.

For example I want to know which MAC OUI belongs to D-Link DIR-645.

  • 1
    To clarify: are you looking for a list of which MAC addresses were issued to a particular brand of router? Apr 28, 2012 at 9:10
  • Exactly, for example I want to know which MAC OUI belong to D-Link DIR-645. Apr 28, 2012 at 9:37
  • You should clarify your terminology. A manufacturer (e.g. Buffalo) has brands (e.g. AirStation™), and a brand contains a line of products (e.g. N600, AC 1200). Many router manufacturers don't have clearly distinct brands, and instead just use their company name and a product identifier (e.g. D-Link DIR-645).
    – duozmo
    Aug 3, 2014 at 20:13

3 Answers 3


I found something, but not quite what I wanted, since there are no assignments between MAC and actual device.




I remember there was one list like that on a website of small hacking group from germany, but its 3 years ago, I dont remember the address.

  • Welcome to StackExchange, Tomáš! This list is very interesting; thank you for sharing. Unfortunately, it only shows the manufacturer, not the exact version of the router.
    – D.W.
    Apr 29, 2012 at 0:26
  • 1
    Im not sure if such list could even exist. I think that manufacturer doesnt have to have some MAC range for different type of devices. There are different ways to fingerprint it, like authentication dialog or protocol used for administration(http mostly nowadays, but it could help ocasionally.) The list I didnt found and was mentioning was only list of manufacturers too. Apr 29, 2012 at 13:43
  • Well, the manufacturer doesn't have to assign the device ID portion of the MAC address that way, and a sensible manufacturer wouldn't, but I suspect the manufacturing process would be much easier if you gave each production run a serialised list of IDs. (i.e. first device off the line is 00:1b:63:00:00:01, second device is 00:1b:63:00:00:02, and so on.) So a partial version of this list might indeed exist. Apr 30, 2012 at 11:33

You are looking for the IEEE public OUI database:


With the vendor identified you can then zero in on the actual product.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .