Legit reviews and bot spam both sound like plausible explanations. I'm sure Google has the server logs to figure that out with reasonable certainty, but unfortunately we don't.