well, at least them hammering my server so hard that it stopped responding seems to have made the current request flood stop. Fortunately THIS particular thing fits a particular URL pattern that I can put on my "go away bots" list. The URLs were technically valid but I have no idea how they were actually, like, ever being generated in the first place.