Depending on country X's relation with the US, they could actively try to prove the attack came from somewhere else. Yes, you can live in country 'A' and route

Depending on country X's relation with the US, they could actively try to prove the attack came from somewhere else. Yes, you can live in country 'A' and route all traffic through a country you hate, 'X', making that country get all the heat. Country 'X' would then attempt to prove that the attackers came from another country. This is a lost battle... while a country points the blame to other country, that country would forward the blame to yet another country. There is an insane amount of vulnerability scanning/port scanning coming from China. You can bet that one of those remote attackers is bound to hit an improperly protected box in the US. It may not even be an attacker, it could be a home PC from a botnet, mindlessly port-scanning IP ranges. Does that mean the US would bomb China? I mean, an attack can come from a single source but be routed behind so many countries, even from the US itself!