If you want to block by IP instead of by email address, you'll want to create a Password Brute Force by IP rule. Brute Force by Email rules look for multiple failed attempts to log into a specific account and lock the targeted account, while Brute Force by IP rules look for multiple failed attempts coming from the same IP address and block that IP.

As for blocking authentication from a specific country, that capability is available in the current version of SmarterMail. As a domain or system administrator, go to a domain's General settings page. There is a card labeled Block Authentication by Country. You can adjust the settings there to either allow or block authentication from specific countries.