Night Index

Saryarka Telecom JSC is a regional telecom operator. The site administrator noticed the daily 404 counter had risen many times over and handed you the access log.

The log also holds ordinary visitors: they browse existing pages and get 200. Your job is to find the client behaving differently and describe it well enough that access can be closed.

Fields follow Elastic naming: source.ip, url.path, http.response.status_code, user_agent.original. Timestamps are UTC.