I've had the same bogus traffic, and referrers, exactly the same. I wrote about this here:

http://blog.steve.org.uk/paying_attention_to_webserver_logs....

Then put together a simple tool to filter out bogus IPs based on their requests, so that I can firewall them:

https://github.com/skx/webserver-attacks