Event submitted by Brian Conley
Event ID:
5156
Source:
Microsoft Windows security auditing.

Message:
The Windows Filtering Platform has permitted a connection.

Application Information:
Process ID: 4320
Application Name: \device\harddiskvolume2\windows\system32\svchost.exe

Network Information:
Direction: Inbound
Source Address: 224.0.0.252
Source Port: 5355
Destination Address: 167.196.121.75
Destination Port: 60070
Protocol: 17

Filter Information:
Filter Run-Time ID: 83103
Layer Name: Receive/Accept
Layer Run-Time ID: 44


System32 Reference

Windows Security Event ID 5156

User Information
 
Only an Email address is required for returning users.

Hide Name
Solution
Additional Links