Site hacked, still getting GET requests from hacker, how to turn the tables

Firstly not really sure if this is the best part of the forum to put this, so if a mod feels it's not please put it where you think best.

My customers website was previously hacked and was serving ads for a large South American website. Gigabytes of ads!

I have removed the hack over 3 months ago but the site is still getting thousands of GET requests daily from their site

GET /images/banners/ad_left.php HTTP/1.1

I have used htaccess to redirect the request back to the user 127.0.0.1, which reduces the load on the Server but still wastes cycles dealing with the hits.

More importantly the customers site recently got hit with a Google algorithmic penalty which I suspect may well be related to the ad traffic, although I'm not sure how. A reconsideration request has fixed it for now but I certainly want to remove this variable from the mix.

So given we know the GET request, is there any way of turning this against the hackers? At the very least something that will give them a reason to remove the site from their ad rotation script.

Any advice would be appreciated.

Thanks

fly to turkey and twat the cunt?

just block that ip and or range to be safe.

serve your own ads, aff links, whatever... it's free traffic sheesh.

Yeh, I would def. server your own ads up... Though you may have some angry webmasters by doing that.