Windows Security Log Event ID 4961

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019
 • Subcategory
 • Subcategory could not be determined
Type Success
Corresponding events
in Windows 2003
and before
Discussions on Event ID 4961
System - Audit IPsec Driver Subcategory

4961: IPsec dropped an inbound packet that failed a replay check

On this page

I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.

Free Security Log Resources by Randy

Supercharger Free Edition

Your entire Windows Event Collection environment on a single pane of glass.



Examples of 4961

IPsec dropped an inbound packet that failed a replay check. If this problem persists, it could indicate a replay attack against this computer.

Remote Network Address: %1
Inbound SA SPI:  %2

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection


Additional Resources