Sounds like an issue with an outdated locally hosted IP2 Location database.
Google thinks it is in Russia too. And Cloudflare thinks the same.
If it's Hurricane Electrics tunnel I've had similiar issues, I think they use Russian blocks for their IPv6 tunnel since the abuse potential is so high and they don't want to deal with it so they just bundle all their shit with Russia and move on.
maybe you actually have a MITM proxy stealing all of your traffic and keystrokes
Sounds more like IP isn't a reliable factor to determine location. Not that this would be bad though.