started getting a bunch of rapid hits on the site with python user agents, that were only after pdf documents (pretty much guaranteed to be bots.) i check the ip addresses and they all trace back to cloud[.]ru (AS208677)
i just blocked the entire AS because i don't need any of that on the site