its just (1000/3000)^3 probable, so easly could get for example handfull of .cn bloggers or something
keb, or add 3 nodes each day for a year, how do you know if it is not already the case
does TOR have something agains that?
to protect from that
it can be cn gov, it can be influential cyber crime group