Did you ever get your attack under control? Were you able to narrow down the IPs that were hitting you? If so, did you contact your web host or datacenter so they can block it on that level before ever getting to your site?