Unusual netstat logs

By cooky560
in Smart Home, Network & Security

 Share

Recommended Posts

Grand Master

cooky560 Veteran

Posted
  • Veteran
Posted

Basically as the title, even if I have no software connecting to the internet, I see these entries in netstat:

tcp4 0 0 1.0.0.5.53974 www-11-02-ash2.f.http ESTABLISHED

tcp4 0 0 1.0.0.5.53972 www-11-02-ash2.f.http ESTABLISHED

tcp4 0 0 1.0.0.5.53970 www-11-02-ash2.f.http ESTABLISHED

tcp4 0 0 1.0.0.5.53967 wy-in-f100.1e100.https ESTABLISHED

tcp4 0 0 1.0.0.5.53966 wy-in-f95.1e100..http ESTABLISHED

tcp4 0 0 1.0.0.5.53965 wy-in-f95.1e100..http ESTABLISHED

tcp4 0 0 1.0.0.5.53964 wy-in-f95.1e100..http ESTABLISHED

tcp4 0 0 1.0.0.5.53941 wy-in-f113.1e100.http ESTABLISHED

tcp4 0 0 1.0.0.5.53939 wy-in-f113.1e100.http ESTABLISHED

tcp4 0 0 1.0.0.5.53909 wy-in-f99.1e100..https ESTABLISHED

tcp4 0 0 1.0.0.5.53902 wy-in-f102.1e100.http ESTABLISHED

tcp4 0 37 1.0.0.5.54077 l1.login.vip.ukl.https CLOSING

tcp4 0 37 1.0.0.5.54076 l1.login.vip.ukl.https CLOSING

I'm really worried, what are they?

Link to comment
https://www.neowin.net/forum/topic/1027514-unusual-netstat-logs/
Share on other sites
Grand Master

+BudMan MVC

Posted
  • MVC
Posted

Ummm your on an IP address of 1.0.0.5 on your box?

inetnum: 1.0.0.0 - 1.0.0.255

netname: Debogon-prefix

descr: APNIC Debogon Project

role: APNIC RESEARCH

1.0.0.0 is a not some address you should be using, you can not just pull IPs out of your ass! Well you can but it can cause you problems. Why would your box be using a 1.0.0.5 address?

as to where you connections are going, seems missing part of the fqdn there? http and https are ports 80 and 443, the numbers next to your 1.0.0.5 are the source ports..

Can you post the netstat -an output so we can see what the actual IPs are vs ptr, etc. which looks to be cut off and not showing the FQDN.

example : wy-in-f99.1e100..https

that .. seems to me to be showing that output was shortened and not showing the full thing.

but 1e100 is owned by google

Grand Master

cooky560 Veteran

Posted
  • Author
  • Veteran
Posted

My box has always had a wan of series 80.x.x.x and a LAN of 1.0.0.x

The read out is

Active Internet connections (including servers)

Proto Recv-Q Send-Q Local Address Foreign Address (state)

tcp4 0 0 1.0.0.5.54514 209.85.227.102.443 ESTABLISHED

tcp4 0 0 1.0.0.5.54485 2.18.191.139.80 ESTABLISHED

tcp4 0 0 1.0.0.5.54468 209.85.227.138.80 ESTABLISHED

tcp4 0 0 1.0.0.5.54467 209.85.227.95.80 ESTABLISHED

tcp4 0 0 1.0.0.5.54466 209.85.227.95.80 ESTABLISHED

tcp4 0 0 1.0.0.5.54425 69.63.190.22.80 ESTABLISHED

tcp4 0 0 1.0.0.5.54423 69.63.190.22.80 ESTABLISHED

tcp4 0 0 1.0.0.5.54422 69.63.190.22.80 ESTABLISHED

tcp4 0 0 1.0.0.5.54075 98.136.48.100.5050 ESTABLISHED

tcp4 0 0 1.0.0.5.54074 69.171.241.10.5222 ESTABLISHED

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

And who set it to use 1.x.x.x ?? I can not believe any router would ship that as default, so someone must of changed it. And I can tell you this, whoever it was has not a clue to anything to do with ip's, there are private ranges that are valid for you to use 10.x.x.x, 192.168.x.x and 172.16-31.x.x -- 1.0.0.x as I showed you is a reserved block of address that is not meant for private use.

Not saying it won't work, but its against common practice and there is NO point to doing it. The private blocks were set assigned for a specific reason, just grabbing a netblock out of your ass is BAD PRACTICE!!

As to those ip ranges.. like I thought

Google Inc. GOOGLE (NET-209-85-128-0-1) 209.85.128.0 - 209.85.255.255

inetnum: 2.18.176.0 - 2.18.191.255

netname: AKAMAI-PA

descr: Akamai Technologies

This is a HUGE distribution network, used by ALL THE MAJOR PLAYERS for lots and lots of reason, they host huge cloud services.

Facebook, Inc. TFBNET2 (NET-69-63-176-0-1) 69.63.176.0 - 69.63.191.255

Yahoo! Inc. A-YAHOO-US9 (NET-98-136-0-0-1) 98.136.0.0 - 98.139.255.255

And then again another facebook range

Facebook, Inc. TFBNET3 (NET-69-171-224-0-1) 69.171.224.0 - 69.171.255.255

With yahoo, I would assume you have messenger or their update software running?

Without seeing your tasklist of what processes can't know what is making the connections. you could through the -b option on your netstat and will show you the process that is making the connection or could use say tcpview from ms to see what is making the connections http://technet.microsoft.com/en-us/sysinternals/bb897437

Or if your on w7 say you could just look at the networking tab under resource monitor to see what is making the connections.

But just because you close your browser, does not mean your machine is not going to be making connections to the internet. Even with every program closed their background processes that many companies install that would be checking for updates in the background, etc. etc. Not a facebook user, but prob your IM client if open that ties in with facebook maybe.

take a look at netstat -anb and you can see what processes are making the connections, or use one of the other methods I listed. But all looks legit to me, other than that nonsense non private IP range your using on your network ;)

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

And what part did you not understand about background processes? From the finder comment I take it your on a mac? Off the top I do not know the OS X command for showing processes that have the connections open.. Would have to look it up, but in linux in general with netstat command its

So for example on my ubuntu box I see this

root@ubuntu:/home/budman# netstat -anp

Active Internet connections (servers and established)

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name

tcp 0 0 0.0.0.0:10000 0.0.0.0:* LISTEN 1428/perl

tcp 0 0 0.0.0.0:4949 0.0.0.0:* LISTEN 591/munin-node

tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 887/sshd

tcp 0 0 0.0.0.0:3000 0.0.0.0:* LISTEN 786/ntop

tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1083/master

tcp 0 44 192.168.1.7:22 10.0.200.6:1252 ESTABLISHED 21252/sshd: budman

See the PID of the process and then the process name, which would be correct since I have ssh connection to my box at home. I would try that on your OS X box, if that is what your running use the -p on linux/unix which is pretty much the guts of OS X anyway and it should show you what has the connections open.

But again connections to those networks would seem legit to me. If you want to shut them down then you need to figure out what process is making them, its clear something is making them ;)

If you really worried fire up a sniffer and take a look what is being sent between your box and those IPs, I do believe that wireshark will run on OS X -- yup see downloads for 10.5 and 10.6 there http://www.wireshark.org/download.html

But I believe netstat -anp would give you want you want to know, ie the process creating the connections - if not p on os x, then just look to what flag it is for your version of netstat.. Most likely have to run that command as root, or sudo up to root to run it to show you that info -- or you will normally not see the pid/program info

Grand Master

cooky560 Veteran

Posted
  • Author
  • Veteran
Posted

No, but I'm not fussed if its a legitimate connection. i tried using that -anp trigger but it doesn't work on a mac, and the man page didn't tell me if there was such a trigger

NETSTAT(1) BSD General Commands Manual NETSTAT(1)

NAME

netstat -- show network status

SYNOPSIS

netstat [-AaLlnW] [-f address_family | -p protocol]

netstat [-gilns] [-f address_family]

netstat -i | -I interface [-w wait] [-abdgt]

netstat -s [-s] [-f address_family | -p protocol] [-w wait]

netstat -i | -I interface -s [-f address_family | -p protocol]

netstat -m [-m]

netstat -r [-Aaln] [-f address_family]

netstat -rs [-s]

DESCRIPTION

The netstat command symbolically displays the contents of various net-

work-related data structures. There are a number of output formats,

depending on the options for the information presented. The first form

of the command displays a list of active sockets for each protocol. The

second form presents the contents of one of the other network data struc-

tures according to the option selected. Using the third form, with a wait

interval specified, netstat will continuously display the information

Grand Master

cooky560 Veteran

Posted
  • Author
  • Veteran
Posted

Richard-Cooks-iMac:~ Cooky$ lsof -i tcp

COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME

Adium 126 Cooky 12u IPv4 0x076a2748 0t0 TCP 1.0.0.5:49157->cs220p2.msg.sp1.yahoo.com:mmcc (ESTABLISHED)

Adium 126 Cooky 13u IPv4 0x076a2b58 0t0 TCP 1.0.0.5:49156->jabber-03-01-snc6.tfbnw.net:jabber-client (ESTABLISHED)

Google 147 Cooky 27u IPv4 0x0769fea8 0t0 TCP 1.0.0.5:49212->wy-in-f105.1e100.net:https (ESTABLISHED)

Google 147 Cooky 72u IPv4 0x0936dad8 0t0 TCP 1.0.0.5:49258->74.125.230.135:http (ESTABLISHED)

Google 147 Cooky 73u IPv4 0x09702708 0t0 TCP 1.0.0.5:49287->www-15-02-ash3.facebook.com:http (ESTABLISHED)

Google 147 Cooky 78u IPv4 0x076a2f68 0t0 TCP 1.0.0.5:49187->a88-221-88-24.deploy.akamaitechnologies.com:http (ESTABLISHED)

Google 147 Cooky 80u IPv4 0x09a086c8 0t0 TCP 1.0.0.5:49259->www-11-01-ash4.facebook.com:http (ESTABLISHED)

Google 147 Cooky 83u IPv4 0x0936f338 0t0 TCP 1.0.0.5:49252->wy-in-f95.1e100.net:http (ESTABLISHED)

Google 147 Cooky 84u IPv4 0x0936e2f8 0t0 TCP 1.0.0.5:49220->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 87u IPv4 0x0769fa98 0t0 TCP 1.0.0.5:49221->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 88u IPv4 0x09370788 0t0 TCP 1.0.0.5:49222->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 89u IPv4 0x0936ff68 0t0 TCP 1.0.0.5:49223->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 90u IPv4 0x09702b18 0t0 TCP 1.0.0.5:49203->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 92u IPv4 0x076a2338 0t0 TCP 1.0.0.5:49224->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 93u IPv4 0x076a1f28 0t0 TCP 1.0.0.5:49225->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 94u IPv4 0x076a1b18 0t0 TCP 1.0.0.5:49226->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 95u IPv4 0x076a1708 0t0 TCP 1.0.0.5:49227->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 96u IPv4 0x076a12f8 0t0 TCP 1.0.0.5:49228->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 97u IPv4 0x076a0ee8 0t0 TCP 1.0.0.5:49229->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 98u IPv4 0x076a0ad8 0t0 TCP 1.0.0.5:49230->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 99u IPv4 0x076a06c8 0t0 TCP 1.0.0.5:49231->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 102u IPv4 0x097022f8 0t0 TCP 1.0.0.5:49205->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 103u IPv4 0x09703748 0t0 TCP 1.0.0.5:49266->74.125.230.142:https (ESTABLISHED)

Google 147 Cooky 110u IPv4 0x09a0b788 0t0 TCP 1.0.0.5:49238->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 111u IPv4 0x09a09708 0t0 TCP 1.0.0.5:49246->74.125.230.128:http (ESTABLISHED)

Google 147 Cooky 113u IPv4 0x09a0af68 0t0 TCP 1.0.0.5:49240->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 114u IPv4 0x09a0b378 0t0 TCP 1.0.0.5:49239->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 115u IPv4 0x09a0ab58 0t0 TCP 1.0.0.5:49241->84.53.178.9:http (ESTABLISHED)

Google 147 Cooky 119u IPv4 0x097012b8 0t0 TCP 1.0.0.5:49288->www-15-02-ash3.facebook.com:http (ESTABLISHED)

Google 147 Cooky 125u IPv4 0x076a3378 0t0 TCP 1.0.0.5:49253->wy-in-f95.1e100.net:http (ESTABLISHED)

Google 147 Cooky 126u IPv4 0x076a3788 0t0 TCP 1.0.0.5:49254->wy-in-f95.1e100.net:http (ESTABLISHED)

Google 147 Cooky 127u IPv4 0x09a07ea8 0t0 TCP 1.0.0.5:49255->wy-in-f95.1e100.net:http (ESTABLISHED)

Google 147 Cooky 135u IPv4 0x09700ea8 0t0 TCP 1.0.0.5:49285->74.125.230.128:http (ESTABLISHED)

Google 147 Cooky 136u IPv4 0x0936eb18 0t0 TCP 1.0.0.5:49282->wy-in-f102.1e100.net:http (ESTABLISHED)

Google 147 Cooky 137u IPv4 0x0769f688 0t0 TCP 1.0.0.5:49286->wy-in-f100.1e100.net:http (ESTABLISHED)

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

there you go 2 processes running, google pid 147 and adium 126 making all the connections.

I know for sure that adium is a crossplatform IM client, thought you said you weren't running any applications ;)

As to process google?? I would figure out the path. From pid number you should be able to look in proc/pid which should be sym link from exe to where its running from..

So for example

root@ubuntu:~# lsof -i tcp

COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME

munin-nod 591 root 5u IPv4 7433 0t0 TCP *:munin (LISTEN)

ntop 786 ntop 1u IPv4 8098 0t0 TCP *:3000 (LISTEN)

that munin-nod pid 591, where is that running from -- well if I look in /proc/591 at the exe link

root@ubuntu:/proc/591# ls -la exe

lrwxrwxrwx 1 root root 0 2011-09-25 08:22 exe -> /usr/bin/perl

So perl is running something - now that might be a bad example to use, have to do a few more steps to track down exactly what perl did ;) So lets look at different example. Lets look at ntop

root@ubuntu:/# cd /proc/786

root@ubuntu:/proc/786# ls -la exe

lrwxrwxrwx 1 root root 0 2011-09-25 08:28 exe -> /usr/sbin/ntop

So now you can figure if you where google is running from, and should it be?? Prob some stupid updater??

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

Not a fan of the new look! But anyway, use the activity monitor and it will show you the details of your processes, you can see pid numbers and it will show you where on the file system the thing is running from, etc. I had a screen shot, but its on myhome box and with the slowness of the site I don't want to bother, you should be able to find it - its called activity monitor.

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

Im not ;) And something is still running or it would be impossible for it to have connections ;) Just because your not running an actual browser window does not mean part of the installed application is not still working, ie checking for updates, tracking you, etc. etc.

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • Elon Musk once again claims Tesla robotaxis are coming soon

      By AnalystDan · Posted

      For the foreseeable that is your choice. I'm interested tom try one, my wife was very pleased because one she is anti-social and driver chat annoys her and two more seriously there is a long history of drivers abusing women, it's rare, but it happens and more than it should. Sometimes she needs to get a late taxi and she says it may make her feel safer.
    • AMD quietly releases a new budget-friendly AM4 processor with 3D cache

      By bledd · Posted

      5800x3d was chopped because it was too good, why bother releasing a new mid range.
    • The $80 video game - A new frontier of cost, or a bridge too far?

      By George P · Posted

      Was it bad, sure, but I got it on PC so it was nowhere near as bad as the PS4/XBO versions. Besides, I spent around 200hrs in there and have yet to play the expansion for it. All in all I think I got my monies worth. Maybe I was lucky and didn't run into anything game breaking like others. Either way, $60 is my limit for a game, the point is I'm not going over that no matter what the title is or how much I want to play it. Thank god I don't suffer from FOMO.
    • spwave 0.9.0-1

      By Copernic · Posted

      spwave 0.9.0-1 by Razvan Serea spwave is a cross-platform audio editor designed for research and advanced analysis. It supports a wide range of audio formats, including WAV, AIFF, MP3, Ogg Vorbis, FLAC, ALAC, raw PCM, and more via plug-ins. spwave offers precise editing tools such as zoom, crop, fade in/out, gain adjustment, and region extraction. It enables detailed spectral and phase analysis and supports unlimited undo/redo. Users can drag and drop files, edit metadata, save labeled regions, and view multiple synchronized waveforms. Internally, spwave processes audio in 64-bit precision, ensuring high accuracy. It runs on Windows, macOS, and Linux, making it a reliable and flexible tool for audio research and editing. spwave has following features: Support for multiple platforms: Windows, macOS, Linux (Motif, gtk), etc. Support for WAV, AIFF, MP3, Ogg Vorbis, FLAC, ALAC, raw, and text files by using plug-ins. Support for many bits/samples: 8bits, 16bits, 24bits, 32bits, 32bits float, 64bits double. Converting the sampling frequency and the bits/sample of a file. Playing, zooming, cropping, deleting, extracting, etc. of a selected region. Fade-in, fade-out, gain adjustment, channel swapping, etc of a selected region. Editing file information that supports comments of WAV and AIFF, and ID3 tag of MP3. Analysis of a selected region using several analysis types, e.g. spectrum, smoothed spectrum, phase, unwrapped phase and group delay. Undoing and redoing without limitation of the number of times. Waveform extraction by drag & drop. Opening files by drag & drop. Autosaving of selected regions (you can do this by drag & drop also). Saving positions and regions as labels. Viewing some waveforms and setting regions synchronously. Almost all processing is 64 bits processing internally. Supported Formats: Read/Write: WAV, AIFF, AIFC, CAF, MP3, Ogg Vorbis, FLAC, ALAC (.caf, .mp4), WMA (Windows), APE, AU/SND, PARIS, NIST, IRCAM, raw PCM, text. Read-only: MPEG-2 Layer 3 MP3, RMP files with VBR support. With 64-bit internal processing, autosave capabilities, and synchronized multi-view waveform editing, spwave is a solid tool for anyone handling complex audio editing or acoustic research. spwave 0.9.0-1 changelog: Implemented CQT spectrum and CQT spectrogram (beta version). Implemented piano-key display for spectrum/spectrogram view. Implemented indication of musical note name in cursor information for spectrum/spectrogram view. Fixed a bug that spectrogram view after zoom-in with large factor sometimes freezes. Fixed a bug that scroll and zoom-out in spectrogram view after zoom-in with large factor do not work correctly. Fixed a bug that spectrogram view provides sometimes wrong time information. Fixed a bug that plugin errors sometimes cause a crash. Fixed a bug that the color of grid lines is wrong in printing. Optimized layout of spectrogram view for printing. Enhanced the function of waveform cropping from label information. Fixed a bug that some items in the preference dialog related to labels do not work. Added some items related to the region label in the preference dialog. Fixed a bug that drawing selected region in the log-frequency axis does not work correctly. Added partial support for the dark mode of Windows (the menu bar and the menus). Fixed a bug that the cursor to indicate current calculation position of spectrogram is sometimes not shown. Changed drawing of cursor information into that with white background so as to make the information legible. Fixed a bug that moving to the head by scrolling the overview display sometimes fails. Added feature of alignment of the view region between spectrum view and spectrogram view. Download: spwave 64-bit | spwave 32-bit | ~3.0 MB (Freeware) Download: spwave ARM64 | 2.9 MB Links: spwave Home page | Other OSes | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Microsoft Weekly: redesigned Windows 11 Start menu, Xbox handheld is here, and more

      By TarasBuria · Posted

      Microsoft Weekly: redesigned Windows 11 Start menu, Xbox handheld is here, and more by Taras Buria This week's news recap is here. Fresh Windows 11 preview builds with the redesigned Start menu and Windows Vista flashbacks, the long-anticipated Xbox handheld, Patch Tuesday updates, gaming news, and more. Quick links: Windows 10 and 11 Windows Insider Program Updates are available Gaming news Great deals to check Windows 11 and Windows 10 Here, we talk about everything happening around Microsoft's latest operating system in the Stable channel and preview builds: new features, removed features, controversies, bugs, interesting findings, and more. And, of course, you may find a word or two about older versions. June 2025 Patch Tuesday updates are out. Windows 10 received KB5060533 with build numbers 19044.5965 and 19045.5965. Supported Windows 11 versions received KB5060842 and KB5060999 with build numbers 26100.4349, 22631.5472, and 22621.5472. Later, Microsoft released an out-of-band update to address problems with games with Easy Anti-Cheat, causing system restarts upon launch, and a couple of recovery updates. Microsoft launched Copilot Vision with Highlights for Windows. This feature enables AI to see what is happening on the screen and offer additional information, analysis, and context. Copilot Vision currently works with up to two apps, but its availability is limited to the United States (more countries are on the way, says Microsoft). Now, here is some useful stuff for Windows users: a neat third-party maintenance tool that can run various checks, troubleshooters, and repair utilities; a useful guide about personalizing OneDrive folders with a touch of color, and more. Windows Insider Program Here is what Microsoft released for Windows Insiders this week: Builds Canary Channel Dev Channel Build 26200.5641 This build introduces the recently announced Start menu redesign. It also packs Lock Screen widget improvements, Narrator enhancements, updates to the gamepad keyboard, and a lot of various fixes. Build 26200.5651 Another Dev build introduced a Settings app agent, Recall improvements, seconds for the calendar clock, context menu enhancements, and more. Beta Channel Build 26120.4250 The Beta build has the same changelog as the one from the Dev Channel. Build 26120.4441 The same build as 26200.5651 from the Dev Channel. Release Preview Channel Build 22631.5545 With build 22631.5545 for Widnows 11, Microsoft improved default browser settings and the Windows Share UI and fixed several bugs. Build 19045.6029 This build introduces improvements to app defaults and multiple fixes for Windows 10. The redesigned Start menu is the most exciting part of the new builds, but as usual, it is rolling out gradually. You can mitigate that by force-enabling the new Start menu using the ViVeTool app as described in our guide. Interestingly, the latest builds introduced a funny bug where Windows 11 plays the Windows Vista startup sound on boot. Microsoft acknowledged the issue and said it is working on a fix in future updates. Meanwhile, if you use the latest Dev and Beta builds, you will get to enjoy 2006 nostalgia each time you turn on your PC. Updates are available This section covers software, firmware, and other notable updates (released and coming soon) delivering new features, security fixes, improvements, patches, and more from Microsoft and third parties. This week's browser updates include a fresh Dev Channel update for Microsoft Edge and secure password deployment in Edge for organizations. The latter arrived in the Stable Channel on June 13 with version 137.0.3296.83. There was also a minor update for Firefox. The latter received version 139.0.4, which addressed several issues with the browser freezing when switching apps, failing to save wallpapers with proper names, and more. In addition to the update, Mozilla announced that Deepfake Detector is shutting down. The service will go dark on June 26, 2025. Moving to Office updates, we have some changes to the new Outlook, which will block more files and allow you to perform more tasks when offline. OneDrive for Mac now supports external disks, Clipchamp lets you trim videos by cutting out parts of the transcript, and OneNote now supports Copilot Notebooks. Microsoft also announced an update on the removal of Exchange Online Basic Authentication in Office 365. Here are other updates and releases you may find interesting: Rufus received an update to version 4.8 with performance improvements for Windows images. Microsoft is committing to upskilling 1 million UK workers in AI this year. Here are the latest drivers and firmware updates released this week: Intel 32.0.101.6881 WHQL graphics driver with a single fix for Overwatch 2. AMD 25.6.2 non-WHQL with support for FBC: Firebreak, The Alters, and more. On the gaming side Learn about upcoming game releases, Xbox rumors, new hardware, software updates, freebies, deals, discounts, and more. A lot happened on the gaming side this week. At the Sunday Game Showcase, Microsoft and ASUS announced two Xbox handhelds: the ROG Xbox Ally and the ROG Xbox Ally X. These portable consoles are a big deal for the world of handheld devices, as they run a special version of Windows, which was optimized for portable gaming consoles with fewer processes running in the background. As such, they offer much better battery life and performance. You can read more about how Microsoft optimized Windows 11 for handhelds in a separate article. Next, we have plenty of new games and DLCs announced at the showcase; here is a recap: Indiana Jones and the Great Circle received a new DLC called The Order of Giants. It will be available on all supported platforms this September. Call of Duty: Black Ops 7 made a surprise appearance at the showcase. Activision released a teaser trailer where the game takes players to a futuristic experience set in 2035. Grounded 2 was announced. The sequel of the game for people with arachnophobia is coming next month, offering gamers a new miniaturized survival adventure. Obsidian Entertainment revealed the release date of The Outer Worlds 2 and details about companions. At Fate's End by Spiritfarer was announced, a new action game about fighting family. It is coming to consoles and PC somewhere in 2026. Skybound Games revealed Invincible VS, a brutal 3v3 tag fighting game by former Killer Instinct developers. Anno 117: Pax Romana received a November release date. Ubisoft also unveiled a special Governor's Edition. Nvidia announced new games for its cloud-streaming gaming service, GeForce NOW. If you own one of the following games, you can play them on Nvidia's cloud. The new additions include Frosthaven Demo, Dune: Awakening, MindsEye, The Alters, Kingdom Two Crowns, and more. Mojang finally has a release date for Vibrant Visuals and Chase the Skies updates. On June 17, Minecraft will get its long-anticipated visual overhaul, new features, fresh mobs, and more. Deals and freebies Steam is running a new Next Fest, during which gamers can try hundreds of games for free. The event ends on June 16, 2025. The Epic Games Store is giving away Two Point Hospital, a humorous hospital builder simulator. As usual, more deals are available in this week's Weekend PC Games Deals article. Other gaming news includes the following: GOG store introduced the One-Click Mods feature with support for Fallout: London and others. Valve announced new accessibility details for game listings on Steam. Steam finally has a native client for Apple Silicon. To finish this week's gaming section, here is an editorial from Paul Hill exploring the new $80 cost frontier in modern gaming. Great deals to check Every week, we cover many deals on different hardware and software. The following discounts are still available, so check them out. You might find something you want or need. JBL Bar 1000 and 700 sound bars Ring Floodlight Cameras Geekom Mini IT12 mini PC - $499 | $200 off Amazon Kindle Scribe (16GB) - $299.99 | 25% off LG gram Pro 16" Copilot+ PCs - $1,499.99 | 25% off GameSir Super Nova Wireless Controller for PC and mobile - $44.99 | 25% off Intel Core Ultra 7 Desktop Processor 265K 5.5 GHz - $259.99 | $144 off 12TB Seagate IronWolf Pro HDD - $218.49 | 13% off Polk Audio React 7" Wireless Subwoofer - $99.99 | 50% off StreamMaster Plus2 4K Gaming Projector - $1,699 | 15% off AMD Ryzen 5 9600X - $179.99 | 35% off Sony BRAVIA 5 65 Inch TV Mini LED - $1,298 | 13% off This link will take you to other issues of the Microsoft Weekly series. You can also support Neowin by registering a free member account or subscribing for extra member benefits, along with an ad-free tier option. Microsoft Weekly image background by

  • Recent Achievements

    • Apprentice
      Wireless wookie went up a rank
      Apprentice
    • Week One Done
      bukro earned a badge
      Week One Done
    • One Year In
      Wulle earned a badge
      One Year In
    • One Month Later
      Wulle earned a badge
      One Month Later
    • One Month Later
      Simmo3D earned a badge
      One Month Later

  • Popular Contributors

    1. 1
      +primortal
      595
    2. 2
      ATLien_0
      277
    3. 3
      +FloatingFatMan
      181
    4. 4
      Michael Scrip
      148
    5. 5
      Steven P.
      111
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!