Network Egress — smoke-a

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2603 · curl)

chainstack.com [104.18.4.35] :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2606 · curl)

browsermine.com [104.21.44.248] :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker (pid 2147 · Runner.Worker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute-agent (pid 2031 · hosted-compute-agent)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
140.82.113.24 :443 (https) TCP
hosted-compute-watchdog-prod-iad-01.githubapp [140.82.114.24] :443 (https) TCP · also recorded: glb-2a3c35-public-internal.githubapp.com

systemd › hosted-compute-agent › sudo › provjobd1767716056 (pid 2046 · provjobd1767716056)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
hosted-compute-watchdog-prod-iad-01.githubapp [140.82.113.23] :443 (https) TCP · also recorded: glb-2a3c35-public-internal.githubapp.com

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2599 · curl)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
PublicInteractionNLB-3bddf5ff6abb91b6.elb [3.248.33.252] :443 (https) TCP · also recorded: oastify.com

systemd › systemd-resolved (pid 570 · systemd-resolved)

168.63.129.16 :53 (dns) UDP

systemd › python3.12 › python3.12 (pid 1393 · python3.12)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (instance metadata)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2596 · curl)

172.86.88.188 :80 (http) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2609 · curl)

webhook.site [178.63.67.106] :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2592 · curl)

198.51.100.10 :80 (http) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2595 · curl)

198.51.100.11 :80 (http) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2588 · curl)

198.51.100.5 :80 (http) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2584 · curl)

203.0.113.1 :80 (http) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2586 · curl)

203.0.113.2 :80 (http) TCP

systemd › systemd-networkd (pid 722 · systemd-networkd)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

garnet-org/action

Kernel-recorded by the Garnet eBPF sensorpinned to commit 80e1283 (merge ref)

PR Comment Smoke Test A and B/smoke-a

run 311446284812026-08-07 03:33:09 UTC

Network Egress

17 destinations · 18 flows · 16 processes

systemd
- hosted-compute-agent[2031 · hosted-compute-agent]runner infrastructure
  - Runner.Listener
    - Runner.Worker[2147 · Runner.Worker]runner infrastructure
      - bash
        curl[2603 · curl]
        chainstack.com104.18.4.35:443 (https) · tcp(detection: dropip)
        curl[2606 · curl]
        browsermine.com104.21.44.248:443 (https) · tcp(detection: dropip)
        curl[2599 · curl]step: 5. Curl to oastify.com
        PublicInteractionNLB-3bddf5ff6abb91b6.elb3.248.33.252:443 (https) · tcp(detection: dropip)also recorded: oastify.com
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        curl[2596 · curl]step: 4. Attempt egress to known IPs
        172.86.88.188:80 (http) · tcp(detection: dropip)
        curl[2609 · curl]
        webhook.site178.63.67.106:443 (https) · tcp(detection: dropip)
        curl[2592 · curl]step: 4. Attempt egress to known IPs
        198.51.100.10:80 (http) · tcp(detection: dropip)
        curl[2595 · curl]step: 4. Attempt egress to known IPs
        198.51.100.11:80 (http) · tcp(detection: dropip)
        curl[2588 · curl]step: 4. Attempt egress to known IPs
        198.51.100.5:80 (http) · tcp(detection: dropip)
        curl[2584 · curl]step: 4. Attempt egress to known IPs
        203.0.113.1:80 (http) · tcp(detection: dropip)
        curl[2586 · curl]step: 4. Attempt egress to known IPs
        203.0.113.2:80 (http) · tcp(detection: dropip)
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - provjobd1767716056[2046 · provjobd1767716056]runner infrastructure
      - hosted-compute-watchdog-prod-iad-01.githubapp140.82.113.23:443 (https) · tcpalso recorded: glb-2a3c35-public-internal.githubapp.com
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - 140.82.113.24:443 (https) · tcp
  - hosted-compute-watchdog-prod-iad-01.githubapp140.82.114.24:443 (https) · tcpalso recorded: glb-2a3c35-public-internal.githubapp.com
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- systemd-resolved[570 · systemd-resolved]runner infrastructure
  - 168.63.129.16:53 (dns) · udp
- python3.12
  - python3.12[1393 · python3.12]runner infrastructure
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(instance metadata)
- systemd-networkd[722 · systemd-networkd]runner infrastructure
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Assertions

1 hit

FAILno_bad_egress_domain

Workload

Repositorygarnet-org/action

WorkflowPR Comment Smoke Test A and B

Jobsmoke-a

Run ID31144628481

Profile UUID019fda48-3919-76af-8dc2-e6c00ee5a6f0

Commit SHA80e128337a0d5d4d97f57e79cec8ab2ffd9f1124(merge ref)

Refrefs/pull/122/merge

Timestamp2026-08-07 03:33:09 UTC

💡 How to read this

Runner.Worker
- bash
  - curl
    - example.com
    - localhost(dns resolver)