if the IP addresses are coming from the same country or countries you do not do business with you can implement a reject/drop rule using countries at the top of your firewall rule list. Alternatively,I think there is a field in the WAF rule that allows you to add blocked sites, you could try adding either the country or the IP address ranges. I don't have a WAF rule operational so I am just surmising.
