Bluetooth Vendor Lookup

What is a Bluetooth vendor lookup?

A Bluetooth vendor lookup identifies the manufacturer of a Bluetooth device from its address. Every Bluetooth device has a unique 48-bit address (like a MAC address), and the first 24 bits (3 bytes) identify the manufacturer through an OUI (Organizationally Unique Identifier) assigned by the IEEE. This tool decodes that identifier to show which company made the device.

Bluetooth vendor identification is useful for network inventory, security auditing, debugging device connectivity issues, and identifying unknown devices that appear in Bluetooth scans. When you see 'Unknown device' in your Bluetooth settings, looking up the vendor can help you identify whether it is a neighbor's headphones, a smart home gadget, or a potentially unwanted device.

How to use this tool

Enter a Bluetooth device address (in the format XX:XX:XX:XX:XX:XX or similar). The tool looks up the first three octets in the IEEE OUI database to identify the manufacturer. It also shows the company name, registered address, and the date the OUI was assigned.

Understanding Bluetooth addresses

• Format: 6 bytes written as hexadecimal pairs (e.g., A4:C1:38:XX:XX:XX).
• First 3 bytes (OUI) identify the manufacturer. Last 3 bytes are device-specific.
• Bluetooth LE (Low Energy) devices may use random/rotating addresses for privacy, making vendor lookup impossible for those addresses.
• The same OUI database is shared with Wi-Fi MAC addresses — the IEEE assigns them from the same pool.

Security applications

Security professionals use Bluetooth vendor lookup during wireless assessments to identify devices in the environment. Unknown Bluetooth devices could indicate unauthorized hardware (rogue devices), potential eavesdropping equipment, or forgotten IoT devices that may have vulnerabilities. Regular Bluetooth scanning combined with vendor identification is part of comprehensive physical security auditing.

Example in practice

Suppose a scan finds a device with address 4C:87:5D:AA:BB:CC. The first three octets, 4C:87:5D, form the OUI (Organizationally Unique Identifier). Looking that prefix up in the IEEE registry identifies the chipset maker. The remaining three octets are assigned by the manufacturer to make each device unique.

Common mistakes

A common mistake is assuming the vendor from the OUI is the brand you bought; many products use Bluetooth modules from a different chipset maker, so the lookup shows the module vendor, not the retailer. Another is trusting the address at all on modern devices — phones now randomise Bluetooth and Wi-Fi addresses for privacy, so a looked-up OUI may be meaningless.

Frequently asked questions

Why can't I identify some Bluetooth devices?

Bluetooth Low Energy (BLE) devices often use randomized MAC addresses for privacy protection. These addresses change periodically and do not contain a real OUI, making vendor identification impossible from the address alone. Additionally, some smaller manufacturers use OUIs registered to their chip supplier (Qualcomm, Nordic Semiconductor) rather than their own company name, which can be misleading.

Is the OUI database the same for Bluetooth and Wi-Fi?

Yes. The IEEE assigns OUI blocks from a single pool, and manufacturers use the same OUI for both Bluetooth and Wi-Fi (and Ethernet) addresses. If you see A4:C1:38 on a Bluetooth device and on a Wi-Fi adapter, both were made by the same company. The IEEE OUI database is publicly available and contains over 30,000 registered manufacturers.

Why do some Bluetooth addresses not match any vendor?

Modern phones and some accessories use randomised or private addresses to prevent tracking, and these deliberately fall outside the registered OUI ranges. A locally administered address has a specific bit set in the first octet, marking it as not tied to a manufacturer, so no vendor lookup will succeed.