{"action":"opened","issue":{"url":"https://api.github.com/repos/phusion/passenger/issues/1373","labels_url":"https://api.github.com/repos/phusion/passenger/issues/1373/labels{/name}","comments_url":"https://api.github.com/repos/phusion/passenger/issues/1373/comments","events_url":"https://api.github.com/repos/phusion/passenger/issues/1373/events","html_url":"https://github.com/phusion/passenger/issues/1373","id":57335522,"number":1373,"title":"Non ruby/passenger entries populating passenger error log","user":{"login":"ylluminate","id":248440,"avatar_url":"https://avatars.githubusercontent.com/u/248440?v=3","gravatar_id":"","url":"https://api.github.com/users/ylluminate","html_url":"https://github.com/ylluminate","followers_url":"https://api.github.com/users/ylluminate/followers","following_url":"https://api.github.com/users/ylluminate/following{/other_user}","gists_url":"https://api.github.com/users/ylluminate/gists{/gist_id}","starred_url":"https://api.github.com/users/ylluminate/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ylluminate/subscriptions","organizations_url":"https://api.github.com/users/ylluminate/orgs","repos_url":"https://api.github.com/users/ylluminate/repos","events_url":"https://api.github.com/users/ylluminate/events{/privacy}","received_events_url":"https://api.github.com/users/ylluminate/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-02-11T16:02:21Z","updated_at":"2015-02-11T16:02:21Z","closed_at":null,"body":"I am curious, I am noticing a lot of non-ruby traffic populating the \"ruby_error_log\" that I have instructed `mod_passenger.c` to keep via:\r\n```\r\nPassengerDebugLogFile /usr/local/apache/logs/ruby_error_log\r\n```\r\n\r\nThe entries are many and varied such as:\r\n```\r\n[tag \"OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_ACCEPT\"] [tag \"WASCTC/WASC-21\"] [tag \"OWASP_TOP_10/A7\"] [tag \"PCI/6.5.10\"] [hostname \"redacteddomain.tld\"] [uri \"/\"] [unique_id \"VNt7-MZkddoABuQClmUAAAA7\"]\r\n[Wed Feb 11 10:57:49.074166 2015] [:error] [pid 451586] [client 144.76.32.148] ModSecurity: Access denied with redirection to http://redacteddomain.tld/ using status 302 (phase 2). Match of \"pm AppleWebKit Android\" against \"REQUEST_HEADERS:User-Agent\" required. [file \"/usr/l\r\n[Wed Feb 11 10:58:07.274498 2015] [fcgid:warn] [pid 451419] [client 157.55.39.13:56954] mod_fcgid: read data timeout in 40 seconds\r\n[Wed Feb 11 10:58:07.274567 2015] [core:error] [pid 451419] [client 157.55.39.13:56954] End of script output before headers: index.php\r\n[Wed Feb 11 10:58:08.341603 2015] [:error] [pid 451572] [client 123.125.71.86] ModSecurity: Rule processing failed. [hostname \"www.redacteddomain.tld\"] [uri \"/some-ver-long-paths-appear-here-sometimes-frequently/\"] [unique_id \"VNt8EMZkddoABuP0@YYAAAAt\"]\r\n[Wed Feb 11 11:00:26.571884 2015] [:error] [pid 455729] [client 72.50.229.162] ModSecurity: Rule processing failed. [hostname \"redacteddomain.tld\"] [uri \"/feed/\"] [unique_id \"VNt8msZkddoABvQxavkAAAAA\"]\r\n```\r\n\r\nAny idea as to why these are appearing here instead of solely within the apache `error_log`?"}}