Baidu traffic


#1

We’re getting a ton of traffic from a few IP addresses from China. They seem to be from the Baidu search engine, specifically the MP3 search. That would be fine, if it weren’t for single IP addresses downloading the mixes rapidly over and over again. It seems to be limited to one specific MP3 so far, and has jumped from just 2000 plays (which is on par with the others) to over 35k in just under a week.

I’m wondering if this is just a huge burst of popularity from China, or if something strange is going on. I certainly don’t want to block traffic, but I don’t want to be inflating counts.

Some log samples:

61.181.3.228 - - [16/May/2008:11:04:15 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:21 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:25 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:22 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:25 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:31 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:10:51:24 -0700] "GET /download/3.mp3 HTTP/1.1" 200 2080922 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:35 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:37 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:37 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:36 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:42 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:42 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:47 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:50 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:48 -0700] "GET /download/3.mp3 HTTP/1.1" 200 18720 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:53 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:54 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:51 -0700] "GET /download/3.mp3 HTTP/1.1" 200 18720 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:53 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:53 -0700] "GET /download/3.mp3 HTTP/1.1" 200 20160 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:04:59 -0700] "GET /download/3.mp3 HTTP/1.1" 200 18720 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 61.181.3.228 - - [16/May/2008:11:05:00 -0700] "GET /download/3.mp3 HTTP/1.1" 200 18720 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[DJ]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" (Started at 10:54, ended 11:05)

124.156.3.132 - - [16/May/2008:01:26:29 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://220.181.38.82/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[king]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 3.5.20706)" 124.156.3.132 - - [16/May/2008:01:26:30 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://220.181.38.82/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[king]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 3.5.20706)" 125.71.143.160 - - [16/May/2008:01:26:30 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://220.181.38.82/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[dj]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 3.5.20706)" 125.71.143.160 - - [16/May/2008:01:26:31 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://220.181.38.82/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[dj]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 3.5.20706)" 221.212.222.74 - - [16/May/2008:01:26:30 -0700] "GET /download/3.mp3 HTTP/1.1" 200 21900 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[dj]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 124.156.3.132 - - [16/May/2008:01:26:26 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://220.181.38.82/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[king]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 3.5.20706)" 124.156.3.132 - - [16/May/2008:01:26:31 -0700] "GET /download/3.mp3 HTTP/1.1" 200 12960 "http://220.181.38.82/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[king]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 3.5.20706)" 221.212.222.74 - - [16/May/2008:01:26:30 -0700] "GET /download/3.mp3 HTTP/1.1" 200 21900 "http://202.108.23.172/m?ct=134217728&tn=baidusg,what you know Skate & Destroy Edit /DJ **&word=mp3,http://www.**.com/download/ZDI$.mp3,,[dj]&si=what you know;;t.i.;;0;;-220350&lm=16777216" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" Obviously these are just limited samples. My log for yesterday was 2.53MB. Today is already up to 4.83 MB. Average is 78 KB.

The referrer link is just a non-branded page that has a link to download the mix from our servers. A few of the others lead me to a login page, and Google Translate won’t convert enough for me to get through.

The ** is my replacement for the actual domain name. If someone needs it to investigate further, I’ll be happy to provide it via PM.