Something strange is happening to my internet requests and I don't have the knowledge to know why it's happening.
I've suddenly started to be directed to google france whenever I do internet searches so I looked up my IP and ip location to see where google thought I was positioned and it turns out that my ip address had changed, the new ip address now belonged to a server in france, a server of an isp that is not my isp.
I checked the ip of my home router and the router's ip didn't match the new ip. I have two windows machines, one running w10 and the other w7, the problem happens on both machines. I also have android tablets and I have checked my ip on these tablets and the correct ip is returned with the correct location and the correct isp. all tablets and pcs are connected to the local network which should in theory share the same IP address(?).
I downloaded wireshark so I could see what was being sent and where, and I can see that packets are continually being sent and received by the ip address of the server in france.
To confuse things, this morning I looked up my ip on both pcs again and the correct ip, location and isp was returned however I checked wireshark and packets were still being sent and received to the ip of the server in France.
Is it possible that some malware is routing traffic to this server in France, and it has infected both my pcs through the network?
I don't use a vpn and don't have one configured. I checked in the windows settings and none were being used. I have scanned with avast and malwarebytes and they have turned up nothing. I'm currently running a microsoft safety scanner but it's not showing anything yet.
I just can't understand what is going on, but then again I have very limited knowledge of security and networking. Does anybody have more of a clue? I've been reading about Mitm attacks and thought this sounds similar.