Support

There are two ways to read your request.

One, you want to block everyone coming from Russia. Geographic blocking (geoblock) was the way to do this but it's been removed. Also note that it was never really effective against real hackers. Real Russian hackers don't try to hack you using their own ISP's IP address. They will use a server in the West, rented with mostly anonymous cryptocurrency, or a botnet with IPs in the West. If you don't believe me please read the book "Sandworm" by Andy Greenberg.

Two, you really want to block everyone whose IP resolved in a .ru domain. This is not possible with Admin Tools for a good reason. If we were to implement such a feature we'd need to do one reverse DNS lookup for each and every IP address visiting your site. That's an additional 0.3 to 1.5 seconds for each and every page load. This is comparable to or higher than Joomla's own page load time, even taking into account all the third party extensions. Essentially, we'd be causing your site to slow down for everybody which downranks it on search engines and drives visitors away, without deterring the real hackers (see above).

I know that it's a bit upsetting or even jarring seeing so many Russian IPs being blocked by Admin Tools. Here's the thing. It blocks them. That's what it's supposed to do. Shooting your feet so you don't look at a long list of auto-blocked IPs is self-defeating and has nothing to do with security and everything to do with psychology. The correct thing to do from a security perspective is the counter-intuitive and annoying thing from a psychology perspective: let Admin Tools do its thing, auto-blocking IPs as they attack your site.

You could define these domain names as Bad Words in Admin Tools and enable bad word filtering in the Web Application Firewall. That's what I was using on our site until I decided to write my own contact form which uses Akismet to filter out obvious spam.