Yeah- I agree. Reconfigure the APN on the network side and you have clearly isolated the source of given traffic.

This is either a government honeypot, or it should be rebranded as “rusty trombone.”