they won’t be sent by infosec.pub directly, but other instances may send activities referencing content from infosec.pub, which will lead lemmy.ml to pull it from the source as well.
this includes for example posts and comments in lemmy.world communities, because lemmy.world will announce those to lemmy.ml.
it should cover all federated actions.
any instance admin can decide to ban you on their instance or remove your content on their instance, but unless it’s a local community or they’re mod of the community these actions won’t federate and will only apply to that specific instance.
the most useful one to look at is generally the one on the user’s home instance, as that should list all actions that federated.
instance bans currently generally don’t federate and won’t show in the modlog of your home instance, but recent lemmy versions are automatically issuing community bans for all communities on that instance that you participated in.