Blocked attempts are requests or actions that a security control stops before they complete. Controls may include a web application firewall, intrusion prevention system, endpoint protection, or access rules. A block means the control detected and rejected activity; it does not show, by itself, whether an attack would have succeeded or whether a system was otherwise compromised.
In real attacks, automated scanners and exploit tools may send repeated requests to vulnerable sites. Defenses can block these requests and record them in logs or telemetry. Counts help indicate attack activity and assess whether controls are working, but can include repeated probes and should not be treated as confirmed intrusions. Investigate relevant logs, verify that systems are patched, and look for signs of successful execution or unexpected changes.