Many of us have users (actual valid users) who live in and visit China and other countries in the world. So we don't block a IP because we think it is in China.

Many of us have users (actual valid users) who live in and visit China and other countries in the world. So we don't block a IP because we think it is in China. Use rate limiting and block bad IPs that are brute-forcing services (don't lock accounts) then you'll be able to serve your users while keeping the bad guys out.