The attacker naturally uses his own country IP address.