We are hosting multiple relays under our AS 210558 and received an email from a local police station in Germany requesting user data, nothing unusual.

The weird thing is, that the relay in question is only a relay and not an exit node since its creation (185.241.208.179) (https://nusenu.github.io/OrNetStats/w/relay/B67C7039B04487854129A66B16F5EE3CFFCBB491.html) - anyone has an idea how this happens?