Could have been low-key physical surveillance (following etc) or deeper surveillance, such as video/audio of hotel room and monitoring of electronics (your [communications] while [in Moscow] is on their network).