for IP address restriction, can you specify countries? or do you need to put in each IP addresses? Also can we restrict IP address? like Blacklist maybe?

It's an allowed list, not a deny list. You can specify CIDR ranges to allow

Thanks