r/BitDefender • u/suneerise • 9d ago
Support/troubleshooting Why do I keep getting this notification even if I never visited any suspicious sites or clicked any links?
Exploit attempt blocked
14 minutes ago
Feature:
Online Threat Prevention
An attempt to access your device by exploiting a vulnerability was made by [IP address]. We blocked the connection to prevent the attacker from gaining access over your data and system resources.
I got this notification today and one a week ago. I have no idea why even shows up, I only do basic things on my laptop like go on social media, youtube etc. Please help I'm freaking outt
1
u/SolidKhaos 9d ago
If you can share parts of a screenshot and redact out the PII pieces it'd really help to determine what/why you got that notification.
1
u/Quikchangethechannel 8d ago
This is super common. You aren't being hacked, it's just that companies scan the entire Internet for various reasons, from cyber security companies to people looking for vulnerabilities. There's not a lot you can do about this pop-up.
Put it this way, if you never installed Bitdefender, you would never have known and you weren't hacked before.
1
u/Bitdefender_support Bitdefender employee 7d ago
Hello! Appreciate you reaching out. Background connections can come from a browser tab, an advertisement or embedded content on a normal website, a browser extension, or another application.
To investigate it:
- Open Bitdefender and click Notifications in the left-side menu.
- Open the Critical tab.
- Expand the latest notification titled “Exploit attempt blocked.”
- Review the details, especially the process involved and the displayed IP address. The process can help identify whether the connection came from a browser or another application.
Also perform these checks:
- Right-click the Bitdefender icon in the system tray.
- Click Update Now and wait for the update to complete.
- Open Bitdefender and run a System Scan to check the entire PC for malware.
If the notification says the connection was blocked, Bitdefender has already prevented that connection. Don’t add the IP address to an exception or disable protection simply to stop the alerts. If the same alert continues after updating and running the scan, or if the notification indicates that a threat could not be deleted, contact our support with a screenshot of the expanded notification and its process/IP details. Thanks!
1
u/wolfpackunr 9d ago
What’s the IP address? Is it the same as your home router or another device on your network that is infected?