We removed geographic blocking as well as all IP geolocation features from our software in early 2020 for the reasons explained in our announcement.
Back to your issue. Let's see what happens and what we can do about tit.
Since you already know the IPs of the spammers you can blacklist them in Web Application Firewall, Site IP Disallow List. Moreover you will need to go to Web Application Firewall, Configure WAF and make sure that “Disallow site access to IPs in the IP Disallow List” is set to Yes.
Disallowed IP addresses are not allowed to do anything on your site and do not generate any emails – except for invalid logins because of the order Joomla generates the internal events Admin Tools hooks into. If you are receiving emails from Admin Tools please tell me what is the Reason listed and make sure that that IP is one of those you blocked so I can further help you.
Another thing you can do to reduce spam is to enable the Project Honeypot integration in the “Project Honeypot” tab of the Configure WAF page. You will need to create a free account on Project Honeypot. The default settings there are aggressive enough to stop a lot of spam.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!