Someone is flooding my log file with entries like this:
Code:
116.117.115.247 - - [19/Jan/2010:10:49:19 -0500] "GET /uploads/5321/Ryan Bradley - 2010 US Nationals SP (US).avi HTTP/1.1" 404 1644 "http://www.skatingvideoclips.com/download.cgi" "Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 5.0)"
It's always 4 entries exactly the same within 1 second, then anywhere from 5 to 30 minutes later 4 more entries. The IP is different for every group of 4, but is always from China. It's been going for 2 days now. I can't block the IPs or even ranges because he's already used IPs from about 200 different ranges.

I think he's trying to download the video repeatedly but from my error log I can see that for some reason at his end the URL is terminating at the space so he's only trying to get a file called Ryan.

(from error_log)
Code:
[Tue Jan 19 10:49:18 2010] [error] [client 116.117.115.247] File does not exist: /home/[username]/public_html/uploads/5321/Ryan, referer: http://www.skatingvideoclips.com/download.cgi
I stopped the 404 errors by creating a blank file called Ryan.

Here is the domlog result after that change:
Code:
123.148.3.201 - - [20/Jan/2010:02:30:37 -0500] "GET /uploads/5321/Ryan Bradley - 2010 US Nationals SP (US).avi HTTP/1.1" 200 - "http://www.skatingvideoclips.com/download.cgi" "Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 5.0)"
So I stopped the 404 which cuts log entries in half, but he's still going.

Is there some way I can crash his "browser" to stop this?
Has anyone else experienced this? Does anyone have any idea what this is all about? Is there a website or page to redirect him to where they can do something about it?
.