In addition to Locations & VPN, it would be useful to create rules based off specific IP addresses.
We've had recent instances where Ip enrichment tools incorrectly tagged an IP address as another country. We don't want to allow this country, so only option is to dismiss the alert. But a new escalation is then created after each sign-in..