If you look at your logs of botnet attacks, most of the traffic is scattered evenly across the world, and cryptoware is probably similar. Ultimately the command

If you look at your logs of botnet attacks, most of the traffic is scattered evenly across the world, and cryptoware is probably similar. Ultimately the command and control will go back to Russia (usually), but firewalling Russia and China is unlikely to help much with any form of attach.