content: Doesn't necessarily mean it's China actually performing the attacks though. With it being one of the most populated nations on Earth, that means more computers/devices are available to be hijacked by hackers located elsewhere. Same for US / Russia originating attacks. They originate from those countries more often, because of the population size.    If i were to scan random ip addresses for an open telnet port, i would more often than not find a China / Russia / US host. So if i were to break into those systems and create a botnet, when attacking someones web server with a ddos, it would very likely look like it originated from one of those countries.