3onedata Technology Co., Ltd. — 3 prefixes (MA-L)
Summary
- // what this is
- 3onedata Technology is registered to MAC prefix
00:22:6Fand 2 more in the IEEE OUI database. When a device's MAC address begins with00:22:6F, that block was registered by 3onedata Technology — the OUI identifies the maker of the network hardware, which is not always the brand on the device. - // analyst note
- Three independent OUI blocks plus an identifiable, operating company with named industrial product lines and a public-market listing constitute verifiable substance beyond a bare IEEE registration.
About this vendor.
A MAC address beginning with 00:22:6F, 40:A2:E5, or DC:31:30 belongs to 3onedata Technology Co., Ltd., a Shenzhen-based manufacturer of industrial networking gear. Devices carrying these prefixes are typically industrial Ethernet switches, IoT gateways, or serial-to-Ethernet (Modbus) device servers deployed in operational-technology (OT) and industrial-control settings rather than consumer or office networks.
3onedata was founded in 2001 and is registered at 3/F, B/2, Jiuxiangling Industrial District, Xili Town, Nanshan District, Shenzhen, Guangdong, China — the address IEEE lists for all three of its confirmed OUI blocks. The company listed on the Shanghai Stock Exchange's STAR Market in 2020, and its public site advertises Ethernet switches, IoT gateways, and railway-grade (EN 50155) switching hardware.
Holding at least three separate MA-L blocks under an identical registrant name and address is itself a signal of genuine industrial-equipment production rather than a shell registration. Underscoring the OT context, a 2025 CVE (CVE-2025-13605) documented an OS command-injection flaw in a 3onedata Modbus gateway model, patched in a subsequent firmware release — evidence these devices see real deployment in industrial networks that security teams should be tracking.
IEEE's public OUI registry does not publish assignment dates, so no registration date can be attributed to any of the three blocks; third-party aggregators show only their own database "last updated" timestamps, which are not IEEE facts. It is also unconfirmed which specific product line maps to each individual prefix — the identification here is vendor-level, not per-block.
- IEEE assignment
- 3 prefixes (00:22:6F, 40:A2:E5, DC:31:30) → 3onedata Technology Co. Ltd., registered Shenzhen, Guangdong, CN [Confirmed] — the IEEE MA-L registry,15886,30697
- Registry / block size
- MA-L (24-bit OUI) for all three assignments; no MA-M (the IEEE MA-M registry) or MA-S (the IEEE MA-S registry) blocks found [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry searches
- HQ / country
- 3/F, B/2, Jiuxiangling Industrial District, Xili Town, Nanshan District, Shenzhen, Guangdong 518055, CN [Confirmed] — IEEE MA-L
- Company status
- active; founded 2001; listed on Shanghai Stock Exchange STAR Market since 2020 [Confirmed] — https://www.3onedata.com/, https://westwardsales.com/3onedata
- Device types
- industrial Ethernet switches, IoT gateways, serial/Modbus device servers, railway-grade (EN 50155) switches [Confirmed] — https://www.3onedata.com/ethernet-switch.html
- Notable products
- Modbus/serial device gateways (e.g. GW1101-1D(RS-485)-TB-P) [Confirmed] — https://cert.pl/en/posts/2026/05/CVE-2025-13605/
- Verified sample prefixes (all MA-L, 3onedata Technology Co. Ltd.)
- 00:22:6F, 40:A2:E5, DC:31:30 [Confirmed] — https://api.maclookup.app/v2/macs/00:22:6F, https://api.maclookup.app/v2/macs/DC:31:30, https://www.macvendorlookup.com/search/3onedata
- Registration date
- Unknown — IEEE's public OUI data (the IEEE MA-L registry) publishes no assignment/registration date; third-party "Updated" timestamps (e.g. maclookup.app shows 00:22:6F "Updated November 17, 2015" and DC:31:30 "Updated on 2024-07-19") are database-refresh artifacts, not IEEE facts[Confirmed] — https://api.maclookup.app/v2/macs/00:22:6F, https://api.maclookup.app/v2/macs/DC:31:30
- Security note
- CVE-2025-13605 — OS command injection in the 3onedata GW1101-1D(RS-485)-TB-P Modbus gateway via the diagnostic tool's IP-address field, allowing authenticated root-context command execution; patched in firmware 3.0.59B2024080600R4353 [Confirmed] — https://cert.pl/en/posts/2026/05/CVE-2025-13605/
- Per-prefix product mapping
- Unknown which specific product line uses which of the three OUI blocks; identification is vendor-level only [Unknown] — no per-OUI product mapping found in any source
- Related vendors
- none identified [Unknown]
- Analyst note
- Multiple independent MA-L blocks under an identical registrant name/address, combined with an identifiable, currently-operating company with named industrial product lines, meet the bar for a substantive vendor entry rather than a bare single-OUI shell registration.