Jinan USR IOT Technology — 4 OUI/MA blocks (MA-L ×3, MA-M ×1)

A MAC address beginning with D4:AD:20, 38:F4:06, D8:B0:4C, or within the F4:70:0C:6/28 sub-block belongs to Jinan USR IOT Technology Limited (brand USR-IOT), a Shandong, China-based manufacturer whose gear typically shows up as serial-to-Ethernet/Wi-Fi converters, industrial IoT gateways, and cellular routers on a network rather than end-user consumer devices.

IEEE's public OUI registry lists four confirmed blocks under this company: D4:AD:20, D8:B0:4C, and 38:F4:06 as MA-L (24-bit) assignments, plus F4:70:0C:6/28 as an MA-M (28-bit) sub-allocation — all registered to "Jinan USR IOT Technology Limited" or "Jinan USR IOT Technology Co., Ltd." Note that the base F4:70:0C itself is held by the IEEE Registration Authority and sub-divided among roughly fifteen unrelated companies (including Annapurna Labs, Becklar, and Beijing ASU Tech); only the F4:70:0C:6/28 slice belongs to this vendor. IEEE's OUI database does not publish an assignment or registration date for any of these blocks, so no date is recorded here.

The product line corroborates the registrant: USR-TCP232 and USR-N580 series serial-to-Ethernet/Wi-Fi converters, USR-410S and similar industrial gateways, and 4G/5G cellular routers, marketed for fire-alarm, environmental-monitoring, power-distribution, and industrial-automation deployments.

Security relevance: CVE-2022-29730 (CVSS 3.1: 9.8) documents a hard-coded, unchangeable highest-privilege admin credential in USR-IOT's 4G LTE Industrial Cellular VPN Router firmware (USR-G800V2, USR-G806, USR-G807, USR-G808, USR-LG220-L), allowing unauthenticated remote takeover. This is confirmed for the cellular-router line specifically, not verified across the full product range.

A related block, 9C:A5:25, is registered to "Shandong USR IOT Technology Limited" — a similarly-named sibling entity. The relationship to Jinan USR IOT Technology is plausible (shared "USR IOT" branding, same Shandong region) but not confirmed identical, so it is noted separately rather than merged.

IEEE assignments

D4:AD:20, D8:B0:4C, 38:F4:06 (MA-L) → "Jinan USR IOT Technology Limited" / "Jinan USR IOT Technology Co., Ltd."; F4:70:0C:6/28 (MA-M) → "Jinan USR IOT Technology Limited" — note the parent base F4:70:0C is IEEE-held and sub-allocated to ~15 unrelated companies; this vendor holds only the /28 slice

[Confirmed] — https://standards-oui.ieee.org/

Related registration

9C:A5:25 (MA-L) → "Shandong USR IOT Technology Limited" [Confirmed registration; relationship to Jinan entity Likely] — https://standards-oui.ieee.org/

Registry / block sizes

MA-L (24-bit) ×3 blocks, MA-M (28-bit) ×1 block [Confirmed] — https://standards-oui.ieee.org/

Registered addresses

Floor F1 & part of F2, Building No. 9, Diya shuang chuang Industrial Zone, No.2566 Century Main Road, Gaoxin District, Jinan, Shandong 250014, China (primary); #1-523, Huizhan Guoji Cheng, Gaoxin Qu, Jinan, Shandong 250101, China [Confirmed] — https://standards-oui.ieee.org/

Registration date

Unknown — IEEE's public OUI database does not publish assignment/registration dates for MAC-address blocks [Confirmed absence] — https://standards-oui.ieee.org/

IANA reference

null — not applicable to an OUI/MAC registration [Confirmed]

Company status

active — trading distributor and manual listings current as of research date [Confirmed] — https://usr.en.alibaba.com/, https://www.directindustry.com/prod/jinan-usr-iot-technology-limited-233606.html

Device types

serial-to-Ethernet/Wi-Fi converters (USR-TCP232 series, USR-N580), industrial IoT gateways (USR-410S), 4G/5G industrial cellular routers/modems, Ethernet switches [Confirmed] — https://usriot.ru/download/M0/USR-TCP232-302_user-manual_V1.1_EN.pdf, https://www.pusr.com/download/M4/USR-TCP232-410S_User_Manual_V1.0.0.pdf

Security note

CVE-2022-29730 — hard-coded, unchangeable highest-privilege admin credential in USR-IOT 4G LTE Industrial Cellular VPN Router firmware v1.0.36 (USR-G800V2, USR-G806, USR-G807, USR-G808, USR-LG220-L), CVSS 3.1 9.8, unauthenticated remote takeover

[Confirmed] — https://nvd.nist.gov/vuln/detail/CVE-2022-29730

Website

en.usr.cn referenced by distributors/manuals; direct fetch failed (expired certificate), not independently verified [Unknown] — http://en.usr.cn/

Company substance

multiple confirmed OUI/MA assignments under the same legal name plus identifiable product line and CVE record — sufficient for a standalone vendor entry rather than a bare single-OUI shell [Confirmed]