Hahaha... stupid fucker, I bet he wonders why the hell those images won't work.
But - if everyone could be bothered to use htacess to cover their ass, then there wouldn't be a problem. Also - check the stats failure report once in a while. When an request has been redirected 500+ times, it's a pretty good indication that someone is trying to hotlink.