There really isn't a whole lot you can do. The host needs to stop this at the router, if possible, otherwise you kinda have to wait it out. There are some scripts out there to help ip ban some of these users/computers, but that only helps so much. When we were under ddos attack, I used a script and it basically just allowed the users to painfully surf the site versus not being able to get on at all. In my case, they left four days later as abruptly as they came.
I reccomend install mod_defalte it helps to ban some of the incoming IP. To stop a DDoS attacker you have to know how to be a DDoS Attacker. I reccomend paying the extra 50 dollars a month to get a hardware firewall.
I say the host because as long as the traffic is battering your box, you are effectively powerless. The traffic needs to be stopped from reaching your box. And this is something only your host/the datacentre can do.