Found in developer logs or automated scripts (like those discussed on GitHub) that track the progress of a site-wide data extraction.
“Activity” in this context means the ripper is still alive, the site hasn’t patched the vulnerability, and new updates are flowing. nip activity siterip upd