What’s the difference between “Response” and “User Action”?

Console>Logs

Response is the action that Cloudbric WAF takes in response to attacks which are either detected and/or blocked. When attacks are blocked Cloudbric generally sends out a 400 Bad Request error message to the hacker's internet browser.

User Action shows whether a country has been blocked by the user’s country block setting.