What Really Happened With the DDoS Attacks That Took Down X | WIRED

I’m positive X is attacked every day.

independent security researcher Kevin Beaumont and other analysts see evidence that some X origin servers, which respond to web requests, weren't properly secured behind the company's Cloudflare DDoS protection and were publicly visible. As a result, attackers could target them directly. X has since secured the servers.

Less of a ‘massive’ attack and more of an unprotected flank.