Years ago I used some online lists to ban at the firewall all Russian and Chinese ip addresses (we would never have customers in those countries). It help cut down scans greatly but unfortunately the lists just aren't that accurate. I'll look at bot traffic occasionally and do a geoip lookup at a couple of places and I'll still get Russian ip addresses. And a traceroute usually seems to confirm it.
comrade1234•6m ago