reference:spamrules_statement_getgeoip