A little extreme, but you could try blocking all of China. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings#Geo-IP_Based_Firewalling Otherwise I would do a packet capture on port 53, look at the DNS records they lookup, and block those.
... View more