Don’t know what to tell you mate, I’ve been fighting this for about 12 months and try whole country blocks. Rules that set the challenge for specific countries but they just move the country, have had all the main offenders, however it just rotates out after blocking those so I end up with Australia being a huge location for spammers, have even had the likes of Brazil, Finland, Vietnam, random African countries. It’s a constant battle and ultimately the only thing that has solved it thus far after numerous attempts and tactics is the blanket cloudflare under attack setting. Not ideal but it’s the best solution thus far for me