Comment by reisse

> but the traffic is _clearly coming from Germany_

How do you know that if the only thing you see on the receiving side is an IP address, which is marked as Iranian?