How to recognise a Microsoft Hyper-V's virtual machine by its MAC address? | FAQ | MAC Address Vendor Lookup
Frequently asked questions

How to recognise a Microsoft Hyper-V's virtual machine by its MAC address?

Summary

# Range or Prefix Vendor Virtual Machine
1 00:15:5d Microsoft Hyper-V

OUIs registered by Microsoft Corp

There are 41 OUI registered by Microsoft Corp:

OUI Assignment Type
70:BC:10MA-L
B8:31:B5MA-L
F0:6E:0BMA-L
CA:12:5CMA-L
F0:1D:BCMA-L
EC:83:50MA-L
EC:59:E7MA-L
D4:8F:33MA-L
D0:92:9EMA-L
C8:3F:26MA-L
C4:9D:EDMA-L
BC:83:85MA-L
B8:4F:D5MA-L
9C:AA:1BMA-L
9C:6C:15MA-L
98:5F:D3MA-L
94:9A:A9MA-L
84:63:D6MA-L
80:C5:E6MA-L
74:E2:8CMA-L
5C:BA:37MA-L
48:86:E8MA-L
48:50:73MA-L
3C:83:75MA-L
2C:54:91MA-L
2C:29:97MA-L
28:18:78MA-L
28:16:A8MA-L
20:A9:9BMA-L
20:62:74MA-L
14:9A:10MA-L
10:2F:6BMA-L
0C:E7:25MA-L
0C:41:3EMA-L
00:25:AEMA-L
00:22:48MA-L
00:1D:D8MA-L
00:17:FAMA-L
00:15:5DMA-L
00:12:5AMA-L
00:03:FFMA-L

Only one of them is known to be used by the Hyper-V Virtual Machines – 00:15:5d.

Detection Rule 1

Affects products: Hyper-V Virtual Machines

Signature: OUI is 00:15:5d

Conditions

For dynamic allocation, MAC addresses' range could be set in Hyper-V preferences.

MAC addresses' range could be set in Hyper-V preferences

The default MAC address is calculated on the first start:

  • The first three octets (aa-bb-cc) are Microsoft's IEEE organizationally Unique Identifier, 00:15:5D (which is common on all Hyper-V hosts).
  • The next two octets (dd-ee) are derived from the last two octets of the server's IP address.
  • The last octet (ff) is randomly generated from the range 0x0 – 0xFF.

Administrator can also set any static MAC address manually:

Administrator can also set any static MAC address manually

References

Example MACs generated

  • 00:15:5d:01:8d:00
  • 00:15:5d:01:8d:01
  • 00:15:5d:01:8d:02

Tested on

  • Windows Server 2012 R2

Virtual Machine’s MAC ranges

Trusted by the following companies

Flex.com webafrica.co.za wework.com guarddog.ai cybercns.com

and many more...

Download an exhaustive MAC Address Vendor Database for your educational, business or enterprise needs.

Our database comes in the following forms: JSON, CSV, XML, Cisco vendorMacs.xml for maximum compatibility and fast integration into existing systems.

Order database
The data was just refreshed