Do you know what the query is that the bot is running?
You can block the query in your .htaccess file or use a little creative filtering to scuttle the attack in the file that is being requested. Can't be any more specific than that given you have provided any details about the attack.