I started seeing this at my company and successfully blocked it with fail2ban. This is what i did <a href="http://shazbert.com/fail2ban-china-ddos-announce-bittorent/" rel="nofollow">http://shazbert.com/fail2ban-china-ddos-announce-bittorent/</a>