HTTP standing codes are server responses to consumer (sometimes browser) requests. The standing codes are discovered within the server response. They embody a three-digit quantity and normally have an outline of the standing. Specs and their performance are outlined by the World Broad Net Consortium (W3C).
The standing codes are how your consumer and a server talk with one another. You may view any web page’s HTTP standing codes without spending a dime utilizing Ahrefs’ search engine marketing Toolbar by clicking the toolbar icon.

You may as well click on and broaden this to see the total header response, which helps with troubleshooting many technical points.

There are 5 ranges for the codes:
Hold studying to be taught what the standing codes imply and the way Google handles them.
1xx standing codes point out the server has acquired the request and the processing will proceed.
100 Proceed – All the pieces is OK proper now. Hold going.
101 Switching Protocols – There’s a message, akin to an improve request, that’s altering issues to a distinct protocol.
102 Processing – Issues are taking place however will not be finished but.
103 Early Hints – Helps you to preload assets, which may also help enhance Largest Contentful Paint for Core Net Vitals.
2xx standing codes imply {that a} consumer request has been acquired, understood, and accepted.
200 OK – All good. All the pieces is profitable.
201 Created – Just like 200, however the measure of success is {that a} new useful resource has been created.
202 Accepted – A request has been accepted for processing, nevertheless it hasn’t been accomplished but. It might not have even began but.
203 Non-Authoritative Info – One thing has modified after it was despatched from the server to you.
204 No Content material – The request has been despatched, however there’s no content material within the physique.
205 Reset Content material – Resets the doc to the unique state, e.g., clearing a kind.
206 Partial Content material – Solely among the content material has been despatched.
207 Multi-Standing – There are extra response codes that could possibly be 2xx, 3xx, 4xx, or 5xx.
208 Already Reported – The consumer tells the server the identical useful resource was talked about earlier.
218 That is advantageous – Unofficial use by Apache.
226 IM Used – This enables the server to ship modifications (diffs) of assets to purchasers.
How Google handles 2xx
Most 2xxs will permit pages to be listed. Nevertheless, 204s will probably be handled as mushy 404s and gained’t be listed.
Mushy 404s may additionally be URLs the place the server says it’s profitable (200), however the content material of the web page says it doesn’t exist. The code ought to have been a 404, however the server says the whole lot is ok when it isn’t. This may additionally occur on pages with little or no content material.
You will discover these mushy 404 errors within the Protection report in Google Search Console.
3xx standing codes point out the consumer nonetheless must do one thing earlier than the request will be profitable.
300 A number of Decisions – There’s multiple potential response, and you might have to decide on considered one of them.
301 Moved Completely – The outdated useful resource now redirects to the brand new useful resource.
302 Discovered – The outdated useful resource now redirects to the brand new useful resource briefly.
302 Moved Quickly – The outdated useful resource now redirects to the brand new useful resource briefly.
303 See Different – That is one other redirect that signifies the useful resource could also be discovered elsewhere.
304 Not Modified – Says the web page hasn’t been modified. Usually used for caching.
305 Use Proxy – The requested useful resource is simply out there for those who use a proxy.
306 Change Proxy – Your subsequent requests ought to use the proxy specified. This code is not used.
307 Non permanent Redirect – Has the identical performance as a 302 redirect, besides you’ll be able to’t swap between POST and GET.
307 HSTS Coverage – Forces the consumer to make use of HTTPS when making requests as a substitute of HTTP.
308 Everlasting Redirect – Has the identical performance as a 301 redirect, besides you’ll be able to’t swap between POST and GET.
How Google handles 3xx
301s and 302s are canonicalization indicators. They move PageRank and assist decide which URL is proven in Google’s index. A 301 consolidates ahead to the brand new URL, and a 302 consolidates backward to the outdated URL. If a 302 is left in place lengthy sufficient or if the URL it’s redirected to already exists, a 302 could also be handled as a 301 and consolidated ahead as a substitute.
302s may additionally be used for redirecting customers to language or nation/language-specific homepages, however the identical logic shouldn’t be used for deeper pages.
303s have an undefined remedy from Google. They could be handled as 301 or 302, relying on how they perform.
A 307 has two completely different instances. In instances the place it’s a short lived redirect, it will likely be handled the identical as a 302 and try to consolidate backward. When net servers require purchasers to solely use HTTPS connections (HSTS coverage), Google gained’t see the 307 as a result of it’s cached within the browser. The preliminary hit (with out cache) could have a server response code that’s doubtless a 301 or a 302. However your browser will present you a 307 for subsequent requests.
308s are handled the identical as 301s and consolidate ahead.
Google will observe as much as 10 hops in a redirect chain. It sometimes follows 5 hops in a single session and resumes the place it left off within the subsequent session. After this, indicators might not consolidate to the redirected pages.
You will discover these redirect chains in Ahrefs’ Website Audit or our free Ahrefs Webmaster Instruments (AWT).
4xx standing codes imply the consumer has an error. The error is normally defined within the response.
400 Dangerous Request – One thing with the consumer request is unsuitable. It’s presumably malformed, invalid, or too massive. And now the server can’t perceive the request.
401 Unauthorized – The consumer hasn’t recognized or verified itself when wanted.
402 Cost Required – This doesn’t have an official use, and it’s reserved for the long run for some sort of digital cost system. Some retailers use this for their very own causes, e.g., Shopify makes use of this when a retailer hasn’t paid its charges, and Stripe makes use of this for probably fraudulent funds.
403 Forbidden – The consumer is thought however doesn’t have entry rights.
404 Not Discovered – The requested useful resource isn’t discovered.
405 Methodology Not Allowed – The request technique used isn’t supported, e.g., a kind wants to make use of POST however makes use of GET as a substitute.
406 Not Acceptable – The settle for header requested by the consumer can’t be fulfilled by the server.
407 Proxy Authentication Required – The authentication must be finished through proxy.
408 Request Timeout – The server has timed out or determined to shut the connection.
409 Battle – The request conflicts with the state of the server.
410 Gone – Just like a 404 the place the request isn’t discovered, however this additionally says it gained’t be out there once more.
411 Size Required – The request doesn’t include a content-length discipline when it’s required.
412 Precondition Failed – The consumer places a situation on the request that the server doesn’t meet.
413 Payload Too Giant – The request is bigger than what the server permits.
414 URI Too Lengthy – The URI requested is longer than the server permits.
415 Unsupported Media Kind – The format requested isn’t supported by the server.
416 Vary Not Satisfiable – The consumer asks for a portion of the file that may’t be equipped by the server, e.g., it asks for part of the file past the place the file truly ends.
417 Expectation Failed – The expectation indicated within the “Anticipate” request header can’t be met by the server.
418 I’m a Teapot – Occurs whenever you attempt to brew espresso in a teapot. This began as an April Idiot’s joke in 1998 however is definitely standardized. With the whole lot being good units as of late, this might probably be used.
419 Web page Expired – Unofficial use by Laravel Framework.
420 Methodology Failure – Unofficial use by Spring Framework.
420 Improve Your Calm – Unofficial use by Twitter.
421 Misdirected Request – The server {that a} request was despatched to can’t reply to it.
422 Unprocessable Entity – There are semantic errors within the request.
423 Locked – The requested useful resource is locked.
424 Failed Dependency – This failure occurs as a result of it wants one other request that additionally failed.
425 Too Early – The server is unwilling to course of the request right now as a result of the request is prone to come once more later.
426 Improve Required – The server refuses the request till the consumer makes use of a more moderen protocol. What must be upgraded is indicated within the “Improve” header.
428 Precondition Required – The server requires the request to be conditional.
429 Too Many Requests – This can be a type of rate-limiting to guard the server as a result of the consumer despatched too many requests to the server too quick.
430 Request Header Fields Too Giant – Unofficial use by Shopify.
431 Request Header Fields Too Giant – The server gained’t course of the request as a result of the header fields are too massive.
440 Login Time-out – Unofficial use by IIS.
444 No Response – Unofficial use by nginx.
449 Retry With – Unofficial use by IIS.
450 Blocked by Home windows Parental Controls – Unofficial use by Microsoft.
451 Unavailable For Authorized Causes – That is blocked for some sort of authorized purpose. You’ll see it typically with country-level blocks, e.g., blocked information or movies, attributable to privateness or licensing. You might even see it for DMCA takedowns. The code itself is a reference to the novel Fahrenheit 451.
451 Redirect – Unofficial use by IIS.
460 – Unofficial use by AWS Elastic Load Balancer.
463 – Unofficial use by AWS Elastic Load Balancer.
494 Request header too massive – Unofficial use by nginx.
495 SSL Certificates Error – Unofficial use by nginx.
496 SSL Certificates Required – Unofficial use by nginx.
497 HTTP Request Despatched to HTTPS Port – Unofficial use by nginx.
498 Invalid Token – Unofficial use by Esri.
499 Shopper Closed Request – Unofficial use by nginx.
499 Token Required – Unofficial use by Esri.
How Google handles 4xx
4xxs will trigger pages to drop from the index.
404s and 410s have an analogous remedy. Each drop pages from the index, however 410s are barely sooner. In sensible purposes, they’re roughly the similar.
421s are utilized by Google to decide out of crawling with HTTP/2.
429s are just a little particular as a result of they’re usually handled as server errors and can trigger Google to decelerate crawling. However ultimately, Google will drop these pages from the index as properly.
You will discover 4xx errors in Website Audit or our free Ahrefs Webmaster Instruments.
One other factor you might wish to examine is that if any of those 404 pages have hyperlinks to them. If the hyperlinks level to a 404 web page, they don’t depend on your web site. Greater than doubtless, you simply must 301 redirect every of those pages to a related web page.
Right here’s how you can discover these alternatives:
- Paste your area into Website Explorer (additionally accessible without spending a dime in AWT)
- Go to the Greatest by hyperlinks report
- Add a “404 not discovered” HTTP response filter
I normally type this by “Referring domains.”
5xx standing codes imply the server has an error, and it is aware of it may well’t perform the request. The response will include a purpose for the error.
500 Inner Server Error – The server encounters some sort of problem and doesn’t have a greater or extra particular error code.
501 Not Carried out – The request technique isn’t supported by the server.
502 Dangerous Gateway – The server was in the course of a request and used for routing. Nevertheless it has acquired a nasty response from the server it was routing to.
503 Service Unavailable – The server is overloaded or down for upkeep and may’t deal with the request proper now. It should in all probability be again up quickly.
504 Gateway Timeout – The server was in the course of a request and used for routing. Nevertheless it has not acquired a well timed response from the server it was routing to.
505 HTTP Model Not Supported – That is precisely what it says: The HTTP protocol model within the request isn’t supported by the server.
506 Variant Additionally Negotiates – Permits the consumer to get one of the best variant of a useful resource when the server has a number of variants.
507 Inadequate Storage – The server can’t retailer what it must retailer to finish the request.
508 Loop Detected – The server discovered an infinite loop when attempting to course of the request.
509 Bandwidth Restrict Exceeded – Unofficial use by Apache and cPanel.
510 Not Prolonged – Extra extensions to the request are required earlier than the server will fulfill it.
511 Community Authentication Required – The consumer wants authentication earlier than the server permits community entry.
520 Net Server Returned an Unknown Error – Unofficial use by Cloudflare.
521 Net Server is Down – Unofficial use by Cloudflare.
522 Connection Timed Out – Unofficial use by Cloudflare.
523 Origin is Unreachable – Unofficial use by Cloudflare.
524 A Timeout Occurred – Unofficial use by Cloudflare.
525 SSL Handshake Failed – Unofficial use by Cloudflare.
526 Invalid SSL Certificates – Unofficial use by Cloudflare.
527 Railgun Error – Unofficial use by Cloudflare.
529 Website is overloaded – Unofficial use by Qualys.
530 – Unofficial use by Cloudflare.
530 Website is frozen – Unofficial use by Pantheon.
561 Unauthorized – Unofficial use by AWS Elastic Load Balancer.
598 (Casual conference) Community learn timeout error – Unofficial use by some HTTP proxies.
How Google handles 5xx
5xx errors will decelerate crawling. Finally, the pages will probably be dropped from Google’s index. You will discover these in Website Audit or Ahrefs Webmaster Instruments, however they could be completely different from the 5xxs that Google sees. Since these are server errors, they could not all the time be current.
