You can spoof your source address to be anything if you’re simply doing a DoS attack. Blocking entire countries won’t solve anything. So, what kind of attack was it exactly?
Not something that I want to discuss here because of lack of complete understanding but even if I did, I feel an online discussion of what happened is not a good thing