I have a network-wide pi hole and I noticed that it requested activity.windows.com, a url blocked by my pi hole, even while my pc is suspended. I pinged 10.0.0.217 and it is currently unreachable. So, somehow, windows pc’s turn on networking, phones home, and turns off even while suspended.
Creepy behavior
How dare you not allow Microsoft use their PC
deleted by creator
Sleep is no longer what it used to be. They killed off S3 sleep in favor of some always connected mode, much like you cell phone.
I only learned this during the pandemic when i started working from home and my work laptop would wake up at 1am, fans blasting 100%
Or my laptop would wake up in my backpack during my commute and drain the whole battery…
I opened a helpdesk ticket and they didnt know why. Their solution was “just turn off your laptop”…
After doing my owm digging, i realized S3 was gone and windows just does whatever the fuck it wants
My Windows 10 machine comes up from sleep when nobody is anywhere near it. Seems weird to me. Also sometimes I wake it, sign in and the folder Music>Pictures (the regular Pictures folder… for some reason that’s where it is) is open in explorer. Couldn’t figure out whether it’s malware or Microsoft.
Go to your NIC’s properties and scroll down to disable WAKE ON MAGIC PACKETS.
If you have any device that scans for your MAC (probably your router) it will wake up. Drove me crazy until I figured it out
It’s most likely modern standby (S0 standby) and not a WOL packet.
All modern laptops default to this, and the latest don’t even give you an option to turn it off.
It was not in my case, the wakes happened when my router or HA controller scanned the network. Changing wake on magic packet (already had wake on lan disabled) remedied it for me.
It probably is that, makes sense. Not sure what devices would be doing it… (Xfinity router?). I even moved to a new house with different devices, router etc and it still did that.
I think it’s any device that scans for known devices so I’d imagine most routers
Yeah, that sounds like ghosts.
I had something similar a while back, where it was waking up from sleep for no reason. I can’t remember the exact reason, but it had to do with a hardware being allowed to wake the device. I disabled it from being able to wake the machine and haven’t had a problem again. You can use the cmd to find which device woke your pc.
You’re right, it could be a setting in Windows or perhaps the BIOS. I know there is often a ‘wake on LAN’ BIOS setting…
the folder Music>Pictures (the regular Pictures folder… for some reason that’s where it is) is open in explorer.
This sounds like the kind of thing that might happen if you have some kind of automatic sync set up, like when you plug your phone in and it automatically copies photos, or perhaps a cloud service that’s syncing photos?
My phone is never plugged into my computer and I don’t have any service like that running that I know of.
It could be OneDrive (though I don’t use it at all) or even the ghost of the Explorer iCloud plugin.
deleted by creator
Windows… With this only word you already have all the abswers
Ain’t 10.0.0.217 an private IP?
Yes that is the local ip of the pc phoning home
Yah. That make sense now. I thought that’s what the domain resolved to.
Never used PiHole but Blocky.
Probably the IP of the device, not the IP resolved through DNS
did you expect it to be a public ip?
Thanks pihole!
(Also, hibernate > sleep imo )
Shutdown is hybrid sleep anyway. Best of both worlds.
Also FYI you have to restart to properly shut down Windows now. If you shut down and then turn it back on it will just resume from S4 hybrid sleep. Shut down does not normally shut down, it enters a zero power sleep state. Restart actually shuts down and reboots the OS.
I think hybernation is really meant for when you want near zero power but a little trickle for something specific to wake the PC, eg an external device or network port. You can also sometimes do this directly in BIOS, if it has the facility.
You’re a bit confused.
- Sleep keeps the system on but in a low power state. User and kernel sessions are kept in RAM. If power is lost, you start from a clean session. The system can resume full power with a key press or mouse movement.
- Hibernate dumps the user and kernel session from RAM to disk and completely powers off. Upon startup, the hiberfil.sys file is read and put back into RAM. The physical power button must be pressed to turn on.
- Hybrid Shutdown uses a feature called Fast Startup. The user session is discarded, while the kernel session is written to disk before the system completely powers off. Upon startup, the hiberfil.sys file is read and puts the kernel session back into RAM. The last logged on user has their profile preloaded, including any apps that support the feature. The physical power button must be pressed to turn on.
You can disable Fast Startup or simply hold SHIFT and click Shutdown. The feature requires the user to press the Shutdown button within Windows for it to function. If you press the physical power button on your case, that is an ACPI initiated shutdown and bypasses the Fast Startup feature. This is by design.
Your motherboard firmware controls whether or not the USB ports will continue to supply power when the system is off. It’s essentially like a wall brick at this point.
Fast Startup was really meant for HDD. With SSD it’s not really necessary. It’s negligible time savings and with how buggy drivers can be, days or weeks old kernel sessions are bound to start causing problems.
Thanks for the extra detail. Yes, Fast Startup can be disabled in various ways. The point I was making was that clicking Windows, Shut Down by default doesn’t really do what most people think it does, what it used to always do.
deleted by creator
