Web traffic show rhythmic threat


#1

Within our stats every week we receive a spike of circa 2k requests that are blocked via hotlinking.
How can I track down where this traffic is coming from?