The reported IP addresses are not just China. With this type of thing you cannot assume immediately that it originates from China. It could be that part of the attacks are routed through Chinese proxies yet originate somewhere completely different.