Depending on the service you're offering, it can make a ton of operation sense to simply blanket-ban a whole bunch of IP blocks, including some that correspond to certain countries. China and Russia, for instance, will provide nearly-zero income but a substantial percentage of exploit attempts, stolen credit card use/validation attempts, et c., for some companies. Just banning them might make a lot of sense.