It seems like malicious traffic would be more agile come from everywhere, but if you block those two countries you filter a great deal of it.