Suggestion

One security principle is to set what you want to allow, then block everything else.

Is better to choose which countries to allow to login, and block the other ones automatically.