Windows Security Log Event ID 5155

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
Category
 • Subcategory
Object Access
 • Filtering Platform Connection
Type Success
Corresponding events
in Windows 2003
and before
861  

5155: The Windows Filtering Platform has blocked an application or service from listening on a port for incoming connections

On this page

I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.

Free Security Log Resources by Randy

Description Fields in 5155

Application Information:

  •  Process ID:  %1
  •  Application Name: %2

Network Information:

  •  Source Address:  %3
  •  Source Port:  %4
  •  Protocol:  %5

Filter Information:

  •  Filter Run-Time ID: %6
  •  Layer Name:  %7
  •  Layer Run-Time ID: %8

Supercharger Free Edition


Supercharger's built-in Xpath filters leave the noise behind.

Free.

 

Examples of 5155

The Windows Filtering Platform has blocked an application or service from listening on a port for incoming connections.

Application Information:

   Process ID:  %1
   Application Name: %2

Network Information:

   Source Address:  %3
   Source Port:  %4
   Protocol:  %5

Filter Information:

   Filter Run-Time ID: %6
   Layer Name:  %7
   Layer Run-Time ID: %8

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection



 

Upcoming Webinars
    Additional Resources