Nutanix, Inc. — 3 prefixes (MA-L)

A MAC address beginning B4:79:47, 50:6B:8D, or E0:19:95 belongs to Nutanix, Inc., typically identifying a hyperconverged-infrastructure (HCI) appliance, its IPMI/BMC management interface, or a virtual NIC that the AHV hypervisor auto-assigned to a guest VM. All three are IEEE MA-L (48-bit OUI) blocks registered to the same San Jose organizational address.

Nutanix (NASDAQ: NTNX) is a publicly traded, well-established datacenter infrastructure vendor founded in 2009, headquartered at 1740 Technology Drive Ste #150, San Jose, CA — the exact address on all three OUI registrations, which corroborates the registry entries against the company's own published HQ. Holding three separate MA-L blocks rather than one is itself a signal of real production volume rather than a token registration.

The clearest device-type confirmation comes from Nutanix's own documentation: the 50:6B:8D block is the range (50:6B:8D:00:00:00 through 50:6B:8D:FF:FF:FF) that AHV, Nutanix's built-in hypervisor, uses to auto-generate MAC addresses for guest-VM virtual NICs. Support docs also reference the MAC of a Nutanix node's IPMI/BMC management port, matching the broader HCI-appliance context of the registrations.

Seeing a Nutanix OUI on a network generally points to an NX-series HCI node (commonly built on Supermicro hardware), a cluster's IPMI/BMC management interface, or a hypervisor-assigned VM NIC — not an end-user client device. Nutanix runs a routine vendor security-advisory program (the NXSA-AHV series) patching bundled third-party component CVEs. Separately, in 2025 the Akira ransomware group's Linux encryptor was documented specifically targeting and encrypting Nutanix AHV VM disk files after initial access via an unrelated third-party SonicWall vulnerability (CVE-2024-40766) — worth noting as usage-risk color for defenders, but not a flaw in the OUI assignment itself.

IEEE assignment

3 prefixes (B4:79:47, 50:6B:8D, E0:19:95) → Nutanix, registered San Jose, CA, US [Confirmed] — IEEE MA-L (lines 9329/10412/25144)

Registry / block size

MA-L (24-bit OUI); holds 3 IEEE prefixes, no MA-M/MA-S entries found [Confirmed] — the IEEE MA-L registry, the IEEE MA-M registry, the IEEE MA-S registry (local IEEE mirror)

HQ / country

1740 Technology Drive Ste #150, San Jose, CA 95110, US (registry address; matches Nutanix's publicly known HQ) [Confirmed] — IEEE MA-L; nutanix.com

Company status

active, publicly traded (NASDAQ: NTNX) [Confirmed] — nutanix.com/products/nx-platforms, techtarget.com

Device types

HCI appliance nodes, IPMI/BMC management interfaces, AHV-assigned VM virtual NICs [Confirmed] — next.nutanix.com (Community), portal.nutanix.com (Field Installation Guide)

Notable products

NX-series appliances, AHV hypervisor, Prism management [Confirmed] — nutanix.com/products/nx-platforms

Verified sample prefixes (all MA-L, Nutanix)

B4:79:47, 50:6B:8D, E0:19:95 [Confirmed] — IEEE MA-L (local registry mirror)

Device-type corroboration

50:6B:8D is the documented range AHV uses to auto-assign guest-VM virtual NIC MAC addresses [Confirmed] — next.nutanix.com/ahv-virtualization-27/how-to-set-mac-address-for-vm-nic-on-ahv-cluster-42497

Historic block

none — Nutanix was founded 2009 and all three registrations are contemporary; no legacy/pre-acquisition block exists [Confirmed absence] — the cached registry snapshots (no additional entries found)

Registration date

Unknown — IEEE's public OUI data publishes no assignment/registration date for any of the three blocks [Confirmed absence of data] — the IEEE MA-L registry (columns are Registry, Assignment, Organization Name, Organization Address only)

Special note

Akira ransomware's 2025 Linux encryptor specifically targets Nutanix AHV VM disk files post-compromise (initial access via an unrelated third-party SonicWall CVE-2024-40766) — usage-risk color, not an OUI/MAC-assignment flaw

[Confirmed] — bleepingcomputer.com, nutanix.com/blog, tenable.com/plugins/nessus/266317

Related vendors

none independently confirmed [Unknown] — omitted rather than invented

Analyst note

Multiple independent MA-L assignments at one corroborated HQ address, plus documented AHV device-type usage of 50:6B:8D, place this well past the bar of a bare single-OUI registration.