UDP traffic

Datagrams matching qname:"ims.mnc001.mcc262.3gppnetwork.org" sent to HoneyLabs sensors over UDP in the last 7 days. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Clear search

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

Service queries

20 datagrams from 1 source

Requests a service answers without a handshake. Scanners send them to find open DNS, NTP, SNMP or SSDP servers, which are also the servers reflection attacks abuse.

DNS 20

Latest DNS datagram, to 53/udp

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  f3 a3 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |.............ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

Amplification checks

Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.

Service	Port	Datagrams	Sources	Factor
DNS	53/udp	20	1	28 to 54

The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.

Destination ports

53/udp DNS20

DNS questions

ims.mnc001.mcc262.3gppnetwork.org A20

DNS record types

Networks

AS29484 Ruhr-Universitaet Bochum from 1 source20

Countries

DE Germany20

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
185.73.23.133	AS29484 Ruhr-Universitaet Bochum	DE	DNS	20	2026-10-10 09:32

Latest datagrams

2026-10-10 09:32:37185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  f3 a3 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |.............ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-10 09:31:39185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  9b 8a 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |.............ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-10 09:30:49185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  40 32 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |@2...........ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-10 09:08:52185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  96 e2 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |.............ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-09 09:25:26185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  b3 65 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |.e...........ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-09 09:25:08185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  7b 02 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |{............ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-09 09:24:30185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  b5 2a 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |.*...........ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-09 09:12:26185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  c5 b4 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |.............ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-08 09:22:25185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  b0 d9 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |.............ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-08 09:17:19185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  7f 6b 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |.k...........ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-08 09:09:41185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  18 62 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |.b...........ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-08 09:09:01185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  94 66 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |.f...........ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-07 09:34:27185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  29 a6 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |)............ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-07 09:33:45185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  12 c2 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |.............ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|

2026-10-07 09:30:10185.73.23.133to 53/udpDNSDE

DNS query A ims.mnc001.mcc262.3gppnetwork.org

payload bytes

00000000  53 57 01 00 00 01 00 00  00 00 00 00 03 69 6d 73  |SW...........ims|
00000010  06 6d 6e 63 30 30 31 06  6d 63 63 32 36 32 0b 33  |.mnc001.mcc262.3|
00000020  67 70 70 6e 65 74 77 6f  72 6b 03 6f 72 67 00 00  |gppnetwork.org..|
00000030  01 00 01                                          |...|