If you don't want to serve traffic to china, and you don't want to respond to requests for traffic you don't serve block it at the firewall level. Other than t

If you don't want to serve traffic to china, and you don't want to respond to requests for traffic you don't serve block it at the firewall level. Other than that, it's not a reliable indicator of activity from China (as it could be a box that was popped that just happens to be in China, or someone could've got hosting in China, or a million and one other possible combinations).