because it has a field COUNTRY – which is left blank. and that field is automatically getting a user’s country by ip, or if it doesn’t find one it puts GLOBAL there. and i suppose – in the case of a spam bot or some other kind of attack, that script is not runned – therefore nothing in the COUNTRY field