I block all RU and CN ip addresses. No ill consequences.

Netstat shows locally established/awaiting connections to the LAN and WAN. Traceroute is a completely different utility that shows a path traffic takes to get out to a specific address. You are wrong.

The one thing that almost makes sense in your incoherent comment is that the gateway device (typically an isp supplied modem/router) identified from a tracert command is that which an engineer could potentially observe internal clients’ traffic on.

Found the Indian tech support scammer :p