How would you then detect that there is a bot net messing with your service? How would you discriminate between bad actors from Romania? Are you going to mass ban huge chunks of possible customers because you dont have granulary enough data? The hard problem is that most of the data logged about you has very "good" uses, but in the same time it can be used for bad things. And there is no way to properly enforce only the good uses. Mass banning groups will only cripple the tech advances we see happening today.