Assuming you don’t want to block Russian-speaking people, but Russian-origin connections, use a firewall that updates its mapping of IP addresses to country. Pfsense has such a plug-in. You will definitely want to log outbound block or ignore events.
