Important to emphasize that this is a cosmetic bug in logs presentation.
The internal mapping database (ip2country.csv) on the Security Management Server / Multi-Domain Management Server / SmartEvent Server / Log Server may not be up to date. Starting in version R80.40 Take 161 and higher, this is automatically updated from the cloud.