Comment by pizzapill

You are wrong. Over 2k from China and 55 from Germany for example. I see the same distribution on my Servers.

That being said: attributing those attacks to Chinese actors based on IP falls a little short. Proxychains exist and are used.