SELECT DATE_FORMAT(time, '%d/%m/%Y') AS date,
       DATE_FORMAT(time, '%H') AS hour,
       (SELECT cn
          FROM iplocation.ip_country
         WHERE from_ip BETWEEN start_number AND end_number)
          AS country,
       from_jid_resource AS client_type,
       COUNT( * ) AS user_total
  FROM event.logtable
 WHERE (time BETWEEN '2010-05-05 00:00:00' AND '2010-05-05 00:05:00')
       AND event = 'LOG_IN'
GROUP BY date, hour, country, client_type
ORDER BY date, hour, country, client_type;