I've been developing B2C and B2B sites for 15 years.

There's state specific shipping, promotion, pricing, and exclusive service and products in nearly every site I've ever built. IF they do business outside the US at all they will nearly all block Russian and Chinese IPs.

Money killed the inclusive open internet sometime around 2008. Apps spit on its grave.

I understand why you might want to block those specific countries, but in my personal cybersec experience, most of the malicious traffic actually comes from AWS and other big enterprises, mainly because of compromised servers hosted there. So I actually don't know what specifically you get by geo blocking, bad guys will still reach your internet hosted service.

Only a single-digit percentage of bruteforcin and scanning attempts gets to our servers once we blocked China and Russia. Going by pure volume they're overwhelmingly overrepresented. I don't know about attack quality, I just assume sophisticated attacks could originate from anywhere, so I just pick the lowest hanging fruit

This comment doesn't really align with the HN commenting guidelines.

I'm not sure meta comments about comment quality do either