Most of the ddos are overseas ips, but since the population of iots to be hacked is different, ddos from Japan is rare, so blocking overseas ips is a countermeasure.