Tracking down WoL triggers :/

Hello,
I have somewhat recently configured my server machine to sleep when it is not in use and wake on network connections.
The problem I am facing is the machine keeps waking when no one is connecting to it, it has been sitting all day with no use at all and it still wakes every 10ish min the goes back to sleep faster than it should (sleep in 5-10min when configured to sleep after 45min inactivity).

I have been trying to track down what is actually connecting and trying to wake the comp however the only info can find at all is that is being woken from the network card. I cant find any further info.

I have a task scheduler task setup to write 'powercfg -lastwake' and 'powercfg -requests' to file whenever the system wakes (system -> power-troubleshooter -> eventID 1) but all that gives me is:

Code:

system wake at Mon 09/18/2017 23:31:35.68 
DISPLAY:
None.

SYSTEM:
None.

AWAYMODE:
None.


Wake History Count - 1
Wake History [0]
  Wake Source Count - 1
  Wake Source [0]
    Type: Device
    Instance Path: PCI\VEN_10EC&DEV_8168&SUBSYS_07501025&REV_11\01000000684CE00000
    Friendly Name: 
    Description: Realtek PCIe GBE Family Controller
    Manufacturer: Realtek
 
- - - - - - - - - - - - - - - - - - END log event - - - - - - - - - - - - - - - - - - -

I have a log event just like this every 10-20 min all day.
and event viewer is just a useless.


I just want to know what is causing the network card to wake the system. what IP is it originating from? what port is it trying to connect to? why the hell does the system sleep again after ten min even though its set to sleep in 45?

/edit: I suppose i should mention im using 64bit windows 7 HP

I had been hunting for an answer for quite a while before i made this thread, then shortly after I finally came accross the info i was missing. Wol with magic packets disabled (intentional) will respond to any network traffic at all, including broadcast messages and random traffic from things like dlna devices and other things on your network. I had assumed it would require a direct request from the device.

I think im going to look into using nginx as a reverse proxy that will send a wol packet (with magic packets enabled) before passing the connection, from my raspberryPI.