There’s a reason I have nearly half the nations in the east completely blocked. They’re all just farms for spamming, botting, hacking and more.
My number one culprit was Singapore with Iran a close second.
I’ll catch flak for this, but it has saved me a lot of headaches over the last few years: if you don’t expect to deal with people from a given nation, block it completely. Black list it and forget it’s even on the planet.
There’s a lot of different ways to do it. In that regard, Google is your friend to read about the different ways to do it and find one that works best for you.
There’s a lot of Geo block scripts for postfix on Github.
I’ve always used Cloudflare for my DNS for all the easy blocking and DDoS mitigation it has.
Do you use CSF on your server? I also use a script that downloads the latest ip’s used by spammers from Stop Forum Spam, this blocks a lot of attempts to access my servers