This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Confused about my computer sending massive amounts of data to a particular IP address

0

Hey all im new to networking. After noticing a huge amount of lag from my browser, I decided to check into it. After checking my ping I noticed there is a huge delay. With my confusion building more I decided to install WireShark to see what was going on. Apparently my computer keeps spamming a certain range of IPs with packets and Im not sure how to stop it.

http://i.imgur.com/nmGTb2E.jpg

Is this some sort of DDoS attack? Or am I a part of a botnet DDoSing an IP? It wont stop, I even installed PeerBlock to block the IPs in question but it continues.

Sorry if something really simple is happening but I'm just not understanding it.

I installed TCPView to see if the packets would show up but I haven't found anything yet. It almost seems like its coming out of nowhere. Sorry I'm new so if theres a dumb answer please help me figure it out.

I checked my network and its definitely coming from my computer.

asked 16 Sep '15, 15:31

nick1212's gravatar image

nick1212
1112
accept rate: 0%

edited 16 Sep '15, 15:33

I restarted and it seemed to fix the problem shortly, but it's happening again. Any ideas? Its clogging up my entire internet and I can't figure out how to stop it.

(16 Sep '15, 18:53) nick1212

One Answer:

0

You are downloading a large file from 190.93.250.70. Open a browser session to http://190.93.250.70 and you should find out what/who this web server is/does. Regards Matthias

answered 16 Sep '15, 21:46

mrEEde's gravatar image

mrEEde
3.9k152270
accept rate: 20%

Hey thanks for the answer, but when I open the IP in console it redirects me to CloudFlare stating that I can't directly access the website using Direct IP.

(16 Sep '15, 21:52) nick1212

You 'open the IP in console' - what do you mean by this ? What does a host 190.93.250.70 command reolve the address to ?

(17 Sep '15, 02:19) mrEEde