XLab, part of Qi An Xin (QAX), says it observed a 50-minute attack on X in at least 34 waves by 4 botnet controllers, despite WaPo story casting doubt over Musk's claim.