At least block the external IP and ports where the transfers are happening. Change the router password, some neighbor might be in the network. It sounds like i

At least block the external IP and ports where the transfers are happening. Change the router password, some neighbor might be in the network. It sounds like it might be part of a DDoS campaign, as well. Hard to diagnose here.