@leah Yup. I run some small sites within a university and they're similarly a shockingly large problem. On one site I've resorted to blocking all of AWS Singapore, because for whatever inscrutable reason a ByteDance bot is hitting every single page every 2-5 minutes, 24/7, every request apparently in a full headless browser (so loading all media and such), and every request from a different IP. This is, mind you, a website that sees maybe a dozen total content updates per year -- in a busy year.