GeoLocation iRule Client_Accepted missing some traffic

So, perhaps your subnets are not matched by the F5, that's still a big issue here. Perhaps add this to your iRule in an appropriate place to log this, creating a DG with what you believe are the class A's you shouldn't see. Perhaps you and the F5database disagree, how recent is it anyway?;

elseif { if class match [IP::client_addr] equals 'some_data_group' } {
 log local0. "Allowed apparent blocked IP from this place: [whereis [IP::client_addr] country]"
}