Anybody with a suspicious amount of "curl/8.7.1" User-Agents in their logs?
#threatintel
G0rb :possum:
npub1p5…ky8t3
2026-10-27 17:52:14 UTC
Author Public Key
npub1p5jzgxh7d267v34epvwgvvr60wdzcztu42hu993u3sgu2www2n5szky8t3Seen on
wss://relay.momostr.pinkPublished at
2026-10-27 17:52:14 UTCEvent JSON
{
"id": "780318dc00dd23d854dd5291b649447589fefabc7642cd6f4928c9f0be28416f",
"pubkey": "0d24241afe6ab5e646b90b1c86307a7b9a2c097caaafc2963c8c11c539ce54e9",
"created_at": 1793123534,
"kind": 1,
"tags": [
[
"t",
"threatintel"
],
[
"proxy",
"https://infosec.exchange/@g0rb/117514143949164319",
"web"
],
[
"proxy",
"https://infosec.exchange/users/g0rb/statuses/117514143949164319",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/g0rb/statuses/117514143949164319",
"pink.momostr"
],
[
"-"
]
],
"content": "Anybody with a suspicious amount of \"curl/8.7.1\" User-Agents in their logs?\n\n#threatintel",
"sig": "426514b971789562e1cc12c3cc7c9fed6638908176eb87535404c30d2f3f91b741d7aa3a585cfef158ddadcd86f80e12ea63c2b5d43a8f390f50f1f5d78c4565"
}