Assuming it was intentional, just trying the waters. Testing what the response is, who actually responds versus who's willing to sweep the incident under the carpet, how hard any response is and how quickly it happens, how much of the internet infrastructure is affected for how long, etc... etc... that's a lot of useful information as preparation for an actual attack.
That's very similar to how the "accidental" flights over neighbouring territory works as far as I understand. This happens regularly between many countries. Just far enough to get some response, but not enough to get shot down immediately.
This is really interesting how you’ve explained it.
In many professional fights the competitors start matches with light, quick jabs to probe their opponents defense.
This feels just like that now that you put it this way. I never connected those dots though.