Claims Crawl

Korgan Insurance JSC is an insurance company. The site administrator noticed the daily 404 counter had risen many times over and handed you the access log.

The log also holds ordinary visitors: they browse existing pages and get 200. Your job is to find the client behaving differently and describe it well enough that access can be closed.

Fields follow Elastic naming: source.ip, url.path, http.response.status_code, user_agent.original. Timestamps are UTC.