Hard to say. The malicious actors would show up as non RU IP addresses in most cases as they use VPN's that consist of compromised machines. I prefer to gener

Hard to say. The malicious actors would show up as non RU IP addresses in most cases as they use VPN's that consist of compromised machines. I prefer to generalize my protections as if everyone were on my LAN and my LAN is considered "dirty".