We had this problem recently
- something internal always hitting "/admin/functions/" which didn't exist, resulting in a 404 or 500 error
- the UserAgent always, "Go-http-client/2.0"

It turned out to be Sumo Logic SIEM event log collection. We've turned it off for now until we figure out how to better configure it