Hillstone Networks — 3 prefixes (MA-L)

A MAC address beginning with 00:1C:54, 30:29:52, or 74:73:E2 belongs to Hillstone Networks, typically seen on enterprise or carrier next-generation firewall (NGFW), intrusion-prevention, and web-application-firewall appliances running the vendor's StoneOS platform.

Hillstone Networks was founded in 2006 by former NetScreen engineers and has grown into a mainstream commercial network-security vendor, reporting over 28,000 customers across 60+ countries. Gartner rates the company a Visionary in its Network Firewalls Magic Quadrant, and its product line spans on-box NGFW/IPS/WAF appliances plus cloud-security offerings (CloudEdge, CloudHive, CloudArmour).

Three MA-L (24-bit) OUI blocks are registered to the company: 30:29:52 and 00:1C:54 to "Hillstone Networks Inc" at two different Beijing, CN addresses, and 74:73:E2 to "Hillstone Networks Corp." in Santa Clara, CA, US. No MA-M or MA-S registrations were found for the company. Multiple assignments spanning the company's China and US legal entities are consistent with a real, operating vendor rather than a single-registration shell.

IEEE's public OUI data does not publish assignment/registration dates for any of these blocks. Third-party aggregator maclookup.app lists "13 May 2007" for 00:1C:54 and "08 December 2023" for 74:73:E2, but those are that site's own database artifacts, not IEEE facts, and are not repeated here as registration dates.

IEEE assignment

3 prefixes → Hillstone Networks Inc (2 blocks) / Hillstone Networks Corp. (1 block) [Confirmed] — the IEEE MA-L registry (IEEE MA-L data)

Registry / block size

MA-L (24-bit OUI) for all 3 blocks; no MA-M or MA-S registrations found [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry (grep for "hillstone" and the three prefixes returned no MA-M/MA-S matches)

Registered addresses

30:29:52 and 00:1C:54 → Beijing, CN (two distinct Beijing addresses: North Olympic Science & Technology Park and A-1905 e-Wing Center); 74:73:E2 → 5201 Great America Pkwy #420, Santa Clara, CA 95054, US [Confirmed] — the IEEE MA-L registry (IEEE MA-L)

Company status

active [Confirmed] — hillstonenet.com

Device types

next-generation firewall (NGFW), intrusion prevention system (IPS), web application firewall (WAF), cloud security (CloudEdge, CloudHive, CloudArmour), running StoneOS [Confirmed] — hillstonenet.com, kb.hillstonenet.com

Notable products

StoneOS-based appliance line; CloudEdge, CloudHive, CloudArmour cloud security products [Confirmed] — hillstonenet.com

Verified sample prefixes (all MA-L)

30:29:52, 00:1C:54, 74:73:E2 [Confirmed] — the IEEE MA-L registry; maclookup.app (org name/address cross-check for 00:1C:54, 74:73:E2)

Registration dates

Unknown per IEEE (IEEE the IEEE MA-L registry publishes no assignment dates). maclookup.app displays "13 May 2007" for 00:1C:54 and "08 December 2023" for 74:73:E2 as its own third-party scrape values, not IEEE facts [Unknown as an IEEE date; Confirmed that maclookup.app displays these artifact values] — maclookup.app

Company substance

founded 2006 by former NetScreen engineers; 28,000+ customers reported across 60+ countries; rated Visionary in Gartner's Network Firewalls Magic Quadrant [Confirmed] — hillstonenet.com, gartner.com

Security context

no abuse or botnet-device history tied to these OUI prefixes found; vendor is a mainstream commercial security-appliance maker [Likely] — gartner.com, businesswire.com

Analyst note

three MA-L blocks split across a Beijing R&D/manufacturing entity and a Santa Clara, CA US entity supports treating this as a genuine multinational vendor rather than a bare single-OUI registration.