Execution chains — agent

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › bash › xargs › bash › timeout › docker (pid 4289 · docker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › node › docker (pid 4400 · docker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › containerd-shim-runc-v2 › awmg (pid 4466 · awmg)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
api.github.com [140.82.112.6] :443 (https) TCP

systemd › docker (pid 4400 · docker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › dockerd (pid 1333 · dockerd)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
ghcr.io [140.82.112.33] :443 (https) TCP
ghcr.io [140.82.112.34] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.108.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.109.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.110.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.111.154] :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › node › claude.exe (pid 4860 · claude.exe)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
api.anthropic.com [160.79.104.10] :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › node (pid 4847 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › node (pid 5481 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
glb-db52c2cf8be544.github.com [140.82.112.21] :443 (https) TCP · also recorded: results-receiver.actions.githubusercontent
blob.bn3prdstrz12a.store.core.windows.net [20.209.113.193] :443 (https) TCP · also recorded: blob.bn3prdstrz12a.trafficmanager.net, productionresultssa19.blob.core.windows

systemd › hosted-compute-agent (pid 2113 · hosted-compute-agent)

140.82.114.23 :443 (https) TCP

systemd › hosted-compute-agent › sudo › provjobd2362554145 (pid 2129 · provjobd2362554145)

140.82.114.23 :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › node (pid 5415 · node)

api.github.com [140.82.114.5] :443 (https) TCP

systemd › systemd-resolved (pid 536 · systemd-resolved)

168.63.129.16 :53 (dns) UDP

systemd › python3.12 › python3.12 (pid 1479 · python3.12)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › node (pid 5507 · node)

productionresultssa19.blob.core.windows [20.209.178.193] :443 (https) TCP · also recorded: blob.bn3prdstrz12a.trafficmanager.net, blob.bn3prdstrz12a.store.core.windows.net

systemd › systemd-networkd (pid 722 · systemd-networkd)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

jadoont/agent-behavior-index

Recorded at the kernel by Garnetfor commit e1eda42

Record agent run/agent

run 383635269712026-10-13 07:36 UTC

Execution chains

17 destinations · 15 processes

systemd
- hosted-compute-agent[2113 · hosted-compute-agent]
  - Runner.Listener
    - Runner.Worker
      - bash
        bash
        xargs
        bash
        timeout
        docker[4289 · docker]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        node[4847 · node]step: <unknown>
        docker[4400 · docker]
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        claude.exe[4860 · claude.exe]
        api.anthropic.com160.79.104.10:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - node[5481 · node]
        glb-db52c2cf8be544.github.com140.82.112.21:443 (https) · tcpalso recorded: results-receiver.actions.githubusercontent
        blob.bn3prdstrz12a.store.core.windows.net20.209.113.193:443 (https) · tcpalso recorded: blob.bn3prdstrz12a.trafficmanager.net, productionresultssa19.blob.core.windows
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - node[5415 · node]
        api.github.com140.82.114.5:443 (https) · tcp
      - node[5507 · node]
        productionresultssa19.blob.core.windows20.209.178.193:443 (https) · tcpalso recorded: blob.bn3prdstrz12a.trafficmanager.net, blob.bn3prdstrz12a.store.core.windows.net
  - sudo
    - provjobd2362554145[2129 · provjobd2362554145]
      - 140.82.114.23:443 (https) · tcp
  - 140.82.114.23:443 (https) · tcp
- containerd-shim-runc-v2
  - awmg[4466 · awmg]step: <unknown>
    - api.github.com140.82.112.6:443 (https) · tcp
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- docker[4400 · docker]step: <unknown>
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- dockerd[1333 · dockerd]
  - ghcr.io140.82.112.33:443 (https) · tcp
  - pkg-containers.githubusercontent.com185.199.108.154:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- systemd-resolved[536 · systemd-resolved]
  - 168.63.129.16:53 (dns) · udp
- python3.12
  - python3.12[1479 · python3.12]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
- systemd-networkd[722 · systemd-networkd]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositoryjadoont/agent-behavior-index

WorkflowRecord agent run

Jobagent

Run ID38363526971

Profile UUID01a13431-65a3-7e3d-a429-f56ed9730e37

Commit SHAe1eda424990a2c519ae12fbab51989378acb5565

Timestamp2026-10-13 07:36:48 UTC

The record is egress-centric; processes without recorded egress do not appear.