These are DDOS attacks and should be treated in law as such.
(Although I do realise that in many countries now we no longer have
any effective "rule of law")
At some point it's easier to geoblock a whole country at the firewall level and loginwall the rest of the world, rather than trying to explain that in your jurisdiction, which is not their jurisdiction, what they are doing is a crime — which they don't give a single fuck about.
lol. Tell that to Nicolae and Elena Ceaucescu, Saddam Hussain, Muammar
Gaddafi, and all those other tinpot nobjockeys who thought their money
and influence would save them from "nice" people.