Unless activity for any given IP reaches epidemic proportion I ignore (eg) ThePlanet, AWS etc - in fact, any server farm I discover. :)
I have large chunks of AWS in the IIS firewall so do not see stuff within those ranges. Other stuff seems to be spread pretty much across the world, although much of it from USA, Russia and Ukraine with a fairly high proportion from China. And, for some reason, "ain't I clever" UK idiots trying it on for no obvious motivation other than self-gratification.