Over the past month I've had about 5 or so occasions where Google force me to do a capture on a normal search, saying that there is unusual traffic from my device.
Recently, past few days, I've had a few specific websites and apps timeout while all other services work as normal.
So, I decided to look into my devices traffic. I found this quite difficult on an android device. But what I did find is that my ip address appears on two blacklists. One of the blacklists state the following:
This IP is infected (or NATting for a computer that is infected) with an infection that is emitting spam. Note: [ip removed] appeared to be suspicious because it was using the following name to identify itself during email connections (port 25) via the HELO/EHLO smtp commands: ".".
I have installed avg antivirus and performed I full scan where no threats were found. The only email client I use is gmail which does not use port 25. Avg does not have a firewall so I have not yet blocked outgoing requests on port 25.
- How might I find out what is sending requests over port 25?
- How might I remove it
- Are there any other steps I should take?
Nokia 7.2 handset Android 10 (up to date) Using 4g connection
Edit 1: I have factory reset my device and have a different IP address. As soon as I went into chrome I was greeted with "we have detected unusual traffic from your computer network" and the new IP appears on two blacklists for the same reasons. Although the connectivity issues to specific websites have now been solved.