Domain: aa.mmtac1.com

Source:

Observed the first requests for this domain on September 20th from:

122.136.196.117 - CNCGROUP China169 Backbone

Response:

About 257 A records in the 221.152.187.x range.

IPtables rule:

iptables --insert INPUT -p udp --dport 53 -m u32 --u32 "0x28&0xFFDFDFFF=0x02414106 && 0x2c&0xDFDFDFDF=0x4d4d5441 && 0x30&0xDFFFFFDF=0x43310343 && 0x34&0xDFDFFFFF=0x4f4d0000" -j DROP -m comment --comment "DROP DNS Q aa.mmtac1.com"

More rules here

Name servers:

mmtac1.com.             86395   IN      NS      ns2.mmtac1.com.
mmtac1.com.             86395   IN      NS      ns1.mmtac1.com.

;; ADDITIONAL SECTION:
ns2.mmtac1.com.         86395   IN      A       64.62.186.77
ns1.mmtac1.com.         86395   IN      A       222.163.192.106
ns2.mmtac1.com.         86395   IN      A       222.163.192.104
ns2.mmtac1.com.         86395   IN      A       64.62.186.74
ns2.mmtac1.com.         86395   IN      A       222.163.192.106
ns1.mmtac1.com.         86395   IN      A       222.163.192.104
ns1.mmtac1.com.         86395   IN      A       162.212.182.165
ns1.mmtac1.com.         86395   IN      A       64.62.186.77
ns1.mmtac1.com.         86395   IN      A       64.62.186.74
ns2.mmtac1.com.         86395   IN      A       162.212.182.165
ns1.mmtac1.com.         86395   IN      A       64.62.186.91
ns2.mmtac1.com.         86395   IN      A       64.62.186.91

Whois:

Domain: mmtac1.com
Status: Protected

DNS:
        ns1.mmtac1.com
        ns2.mmtac1.com

Created: 2013-09-14 16:33:54
Expires: 2014-09-14 08:33:54
Last Modified: 2013-09-14 16:33:54

Registrant Contact:
        Whoisprotection.cc
        Domain Admin  (reg_1358530@whoisprotection.cc)
        Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
        Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000
        P: +603.89966788 F: +0.0

Administrative Contact:
        Whoisprotection.cc
        Domain Admin  (adm_1358530@whoisprotection.cc)
        Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
        Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000
        P: +603.89966788 F: +0.0

Technical Contact:
        Whoisprotection.cc
        Domain Admin  (tec_1358530@whoisprotection.cc)
        Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
        Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000
        P: +603.89966788 F: +0.0

Billing Contact:
        Whoisprotection.cc
        Domain Admin  (bil_1358530@whoisprotection.cc)
        Lot 2-1, Incubator 1, Technology Park Malaysia, Bukit Jalil
        Kuala Lumpur, Wilayah Persekutuan, Malaysia 57000
        P: +603.89966788 F: +0.0