A
A
amigo98762020-08-27 12:14:21
Apache HTTP Server
amigo9876, 2020-08-27 12:14:21

What are the Head requests in access.log with a 301 redirect?

I can't figure out what it is. In the search, I found only some vague considerations that these are bots. These are the queries in the logs:

wcbiathlon.ru 185.203.240.129 - - [08/Aug/2020:14:43:26 +0300] "HEAD / HTTP/1.0" 301 - "https://psyinspire.com" "Mozilla/7.0 (compatible; MSIE6.00; Windows 2004)"
wcbiathlon.ru 185.209.20.147 - - [08/Aug/2020:14:43:26 +0300] "HEAD / HTTP/1.0" 301 - "https://metrixdesign.ru" "Mozilla/3.0 (compatible; MSIE7.00; Windows 2006)"
wcbiathlon.ru 85.209.89.224 - - [08/Aug/2020:14:45:15 +0300] "HEAD / HTTP/1.0" 301 - "https://pravda-o-coronaviruse.ru" "Mozilla/6.0 (compatible; MSIE3.00; Windows 2006)"
wcbiathlon.ru 212.86.109.31 - - [08/Aug/2020:14:45:16 +0300] "HEAD / HTTP/1.0" 301 - "https://potolkii.ru" "Mozilla/5.0 (compatible; MSIE3.00; Windows 2007)"
wcbiathlon.ru 85.209.89.205 - - [08/Aug/2020:14:45:44 +0300] "HEAD / HTTP/1.0" 301 - "https://1agm.ru" "Mozilla/7.0 (compatible; MSIE7.00; Windows 2007)"


This is what a normal request looks like. The user went from Yandex to the page /news/video/8185-men-pursuit-14-03-2020.html, it loaded, everything is OK (response 200).

wcbiathlon.ru 213.87.86.210 - - [15/Aug/2020:04:50:43 +0300] "GET /news/video/8185-men-pursuit-14-03-2020.html HTTP/1.0" 200 10724 "https://yandex.ru/" "Mozilla/5.0 (Linux; Android 9; Redmi Note 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.111 Mobile Safari/537.36"


But Get requests with a transition from third-party sites, and a redirect to nowhere.

wcbiathlon.ru 37.229.196.63 - - [10/Aug/2020:03:34:39 +0300] "GET /news/ HTTP/1.0" 301 235 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
wcbiathlon.ru 37.229.196.63 - - [10/Aug/2020:03:34:40 +0300] "GET /news/ HTTP/1.0" 301 235 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
wcbiathlon.ru 37.229.196.63 - - [10/Aug/2020:03:34:40 +0300] "GET /news/ HTTP/1.0" 301 235 "https://sauni-moskva.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
wcbiathlon.ru 37.229.196.63 - - [08/Aug/2020:09:09:42 +0300] "GET /season/ HTTP/1.0" 301 237 "https://sauna-v-ufe.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"
wcbiathlon.ru 37.229.196.63 - - [11/Aug/2020:11:15:09 +0300] "GET /season/ HTTP/1.0" 301 237 "https://sauni-lipetsk.ru/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)"


Nowhere, because further this IP does not appear in the server logs.

235 Successfully authenticated to the server.
237 - did not find a description.

Please help me understand the problem.
If anything, then this is a regular hosting with all the ensuing rights. I am not an administrator.

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question