Been checking the logs for the culprit in high utilization and came across a likely suspect SoGou, a chinese state sponsored actor (I suspect) masquerading as a search engine

Spider user agent: Sogou web spider/4.0

IPs found so far
220.181.125.86
218.30.103.143
123.126.113.148

Distill Networks has the CIDR blocks as
220.181.125.0/24
123.126.51.64/27
123.126.51.96/28
123.126.68.25
61.135.189.74
61.135.189.75

robots.txt code (for what it is worth — many bad bots ignore it)

User-agent: Sogou web spider
Disallow: /

.htaccess

RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} \
sogou\
[NC]
RewriteRule .* - [F]

Space is important before nocase [NC]

I have a huge list I use. You can easily add to this wit this syntax. Just keep the chain under 500 entries after which you should start a new RewriteCond %{HTTP_USER_AGENT} \ rule
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} \
semrushbot|\
seoengworldbot|\
sogou\
[NC]
RewriteRule .* - [F]