A security analyst noticed the following entry on a web server log: Connection refused in /hj/var/www/showimage.php on line 7 Which of the following malicious activities was most likely attempted?

The correct answer is C. SSRF. The malicious activity that was most likely attempted is SSRF (Server-Side Request Forgery). This is a type of attack that exploits a vulnerable web application to make requests to other resources on behalf of the web server. In this case, the attacker tried to use the fopen func

Submitted by layla.eg· Mar 6, 2026Security Operations

Question

A security analyst noticed the following entry on a web server log:

Connection refused in /hj/var/www/showimage.php on line 7 Which of the following malicious activities was most likely attempted?

Options

AXSS
BCSRF
CSSRF
DRCE

How the community answered

(43 responses)

A
16% (7)
B
2% (1)
C
72% (31)
D
9% (4)

Explanation

The malicious activity that was most likely attempted is SSRF (Server-Side Request Forgery). This is a type of attack that exploits a vulnerable web application to make requests to other resources on behalf of the web server. In this case, the attacker tried to use the fopen function to access the local loopback address (127.0.0.1) on port 16, which could be a service that is not intended to be exposed to the public. The connection was refused, indicating that the port was closed or filtered.

Topics

#web server logs#SSRF#web application attacks#incident detection

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice