[bradley13]

Not seeing how this is stereotyping. He is just presenting his results. Whether those results stem from direct attacks or botnets? He doesn't even speculate.

When I ran public servers a few years ago, I saw similar results. Since the company had no customers in Asia, we IP-blocked the entire continent.

[out-of-ideas]

the distribution looks spot on for what it used to look back in late 2000's as well from my collection of memories (minus south america, russia)

[eddd-ddde]

Being surprised that there were more attacks from X countries as opposed to Y countries implies an expectation that there would be the opposite.