Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

ChristianPav's avatar

Am I hacked or is someone just trying?

Looking at some production logs I'm seeing some suspicious exceptions thrown.

// I removed the rest of the domain it attempted.
Invalid Host "'pay2key...". (View: /app/resources/views/layouts/master.blade.php)

It looks like ransomware.

Here is another one

 (Symfony\Component\HttpFoundation\Exception\SuspiciousOperationException(code: 0): Invalid Host \"'pay2key....\". at /app/vendor/symfony/http-foundation/Request.php:1183)

Should I be worried, or is this a failed attempt at something?

Searching for "pay2key" It looks like ransomware.

Looking at my server there haven't been any changes to my files. Everything is the same as my git master branch so they haven't added or altered any files.

0 likes
2 replies
Tray2's avatar

It looks like someone is trying to do some nasty stuff one your site.

Laravel is pretty good at protecting you. The most important thing is that your env file isn't accessible.

https://yoursite.com/.env
ChristianPav's avatar

Yeah, I'm thinking someone's making requests with some altered headings, and Laravel's blocking. Just looking for reassurance. Thanks.

Please or to participate in this conversation.