I intentionally geofence most countries for certain initiatives where the high probability audience is in my country, U.S. (for cybersecurity reasons). Choosing a "deny" rule keeps out a lot of the crap one otherwise has to deal with (probes, scans, connections, DDOS, etc.