Fer sure...
I know as well as a host file, MBAM will block IP addresses it deems malicious. This could be why things get boring when doing work on honeypots. But you have to test the defenses, and give them a chance to work. Testers sometimes have to turn off the protections that the Internet Explorer browser already supply to get a reaction to the particular solution they are testing. I would say IE 9 blocks about 85% of the zero day exploits right off the bat, using already known built in protections.
It can be real work getting a hit sometimes. I'd say that happens to me occasionally, as well, running under my normal work load. Of course my email clients block most threats in my in box. so I rarely get a hit that way, just by accident.
