Beware of narrative stretches used for PR purposes. Even a single packet sent from a Ukrainian IP in a DDoS attack on X platform doesn’t imply 'Ukraine behind it'. This is an oversimplification, perhaps to to divert attention. Attribution doesn’t work that way—an IP is inconclusive. And much of Ukraine is occupied, with traffic operated by Russian ISPs.