Sometimes, not all the times, but sometimes it is better to just allow traffic from certain countries you know are legitimate. MaxMind’s mod_geoip2 makes it easy: http://www.maxmind.com/app/mod_geoip