Basic Account: Add firewall with geoblocking and individual IP bloking

Can a firewall be added to a basic account that allows geoblocking AND individual IP blocking? The application on our basic plan places a form on our website. That form is getting fake submissions from Russia and other countries. We have GeoBlocked our website but some bad actors in other countries are submitting the form through the application hosted on AWS basic. (This is an assumption since I have blocked them by geography and individual IP a the wordpress website. They still reach the application through the blocked country and specific IP address. So I assume the bad actor is accessing our application directly on the AWS server somehow and filling out the form.) Thank you for your assistance with this. Q!