Windows Security Log Event ID 5031

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
Category
 • Subcategory
Object Access
 • Filtering Platform Packet Drop
Type Failure
Corresponding events
in Windows 2003
and before
 

5031: The Windows Firewall Service blocked an application from accepting incoming connections on the network.

On this page

It's strange that this event refers to "Windows Firewall Service" when it is supposed to be a Filtering Platform Connection event.  Windows Firewall is built on top of the Windows Filtering Platform.  Perhaps it's because there is not Windows Firewall subcategory for connection type events.

At any rate as the description says, Windows Firewall prevented an application from accepting incoming connections due to absence of an appropriate Exception in the current profile's policy.

Free Security Log Resources by Randy

Description Fields in 5031

  • Profiles:  %1
  • Application:  %2

Supercharger Free Edition


Supercharger's built-in Xpath filters leave the noise behind.

Free.

 

Examples of 5031

The Windows Firewall Service blocked an application from accepting incoming connections on the network.

Profiles:  Public
Application:  C:\windows\system32\tcpsvcs.exe

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection



 

Upcoming Webinars
    Additional Resources

      Go To Event ID:

      Security Log
      Quick Reference
      Chart
      Download now!