but the traffic is _clearly coming from Germany_, the issue is that cloudflare/google have tagged certain ip addresses as Iranian no matter where the traffic actually originates from
How do you know that if the only thing you see on the receiving side is an IP address, which is marked as Iranian?