jadoont/agent-behavior-index

Recorded at the kernel by Garnetfor commit cfbd538

Record agent run/agent

run 357974466892026-09-22 23:29 UTC

Execution chains

27 destinations · 20 processes

systemd
- hosted-compute-agent[2010 · hosted-compute-agent]
  - Runner.Listener
    - Runner.Worker
      - bash
        bash
        xargs
        bash
        timeout
        docker[4292 · docker]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        sudo
        node
        getent[5207 · getent]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        docker
        docker-compose[5323 · docker-compose]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - node[7352 · node]
        api.github.com140.82.112.5:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - node[7460 · node]
        glb-db52c2cf8be544.github.com140.82.112.21:443 (https) · tcpalso recorded: results-receiver.actions.githubusercontent
        productionresultssa8.blob.core.windows.net57.150.75.161:443 (https) · tcpalso recorded: blob.bnz49prdstrz09a.trafficmanager.net, blob.bnz49prdstrz09a.store.core.windows
      - node[7487 · node]
        productionresultssa8.blob.core.windows.net57.150.4.193:443 (https) · tcpalso recorded: blob.bnz49prdstrz09a.trafficmanager.net, blob.bnz49prdstrz09a.store.core.windows
      - node[7475 · node]
        productionresultssa8.blob.core.windows.net57.150.84.225:443 (https) · tcpalso recorded: blob.bnz49prdstrz09a.trafficmanager.net, blob.bnz49prdstrz09a.store.core.windows
  - sudo
    - provjobd2634248984[2031 · provjobd2634248984]
      - 140.82.114.24:443 (https) · tcp
  - 140.82.114.23:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- dockerd[1304 · dockerd]
  - registry-1.docker.io100.30.41.220:443 (https) · tcp
  - auth.docker.io104.18.43.178:443 (https) · tcpalso recorded: auth.docker.io.cdn.cloudflare.net
  - localhost127.0.0.1:41615 · udp
  - ghcr.io140.82.114.34:443 (https) · tcp
  - 168.63.129.16:53 (dns) · udp
  - pkg-containers.githubusercontent.com185.199.108.154:443 (https) · tcp
  - d3ipk8a4rcghwr.cloudfront.net3.167.56.81:443 (https) · tcpalso recorded: production.cloudfront.docker.com
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- containerd-shim-runc-v2
  - touchsetup-iptables.shsetup-iptables.sh
    - getent[6026 · getent]
      - localhost127.0.0.11:50485, 53 (dns) · udp(dns resolver)
  - entrypoint.sh
    - awf-cmd-1.sh
      - node[6812 · node]step: <unknown>
        claude.exe[6904 · claude.exe]
        172.17.0.1:8080 (http-proxy) · tcp
        172.30.0.10:3128 (squid-proxy) · tcp
        172.30.0.30:10000 (ndmp), 10001 · tcp
        172.30.0.30:10000 (ndmp), 10001 · tcp
        localhost127.0.0.11:50485, 53 (dns) · udp(dns resolver)
    - api-proxy-health-check.shtimeoutbash
      - cat[6167 · cat]step: <unknown>
        172.30.0.30:10000 (ndmp), 10001 · tcp
  - awmg[4560 · awmg]step: <unknown>
    - api.github.com140.82.112.5:443 (https) · tcp
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - squid[5412 · squid]
    - api.anthropic.com160.79.104.10:443 (https) · tcp
    - 168.63.129.16:53 (dns) · udp
  - node[5419 · node]
    - 172.30.0.10:3128 (squid-proxy) · tcp
- python3.12
  - python3.12[1416 · python3.12]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
- systemd-resolved[510 · systemd-resolved]
  - 168.63.129.16:53 (dns) · udp
- systemd-networkd[722 · systemd-networkd]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositoryjadoont/agent-behavior-index

WorkflowRecord agent run

Jobagent

Run ID35797446689

Profile UUID01a0cb74-1851-7e8f-8a3f-23e34d8dcb30

Commit SHAcfbd538b4325dc23f39ba4d9a8a93d6924602d09

Timestamp2026-09-22 23:29:25 UTC

The record is egress-centric; processes without recorded egress do not appear.