Execution chains — smoke-a

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2393 · curl)

chainstack.com [104.18.5.35] :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2408 · curl)

pastebin.com [104.20.29.150] :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2388 · curl)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
oastify.com [54.77.139.23] :443 (https) TCP · also recorded: PublicInteractionNLB-3bddf5ff6abb91b6.elb

systemd › hosted-compute-agent › sudo › provjobd2475173931 (pid 1882 · provjobd2475173931)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
glb-2a3c35-public-internal.githubapp.com [140.82.114.23] :443 (https) TCP · also recorded: hosted-compute-watchdog-prod-iad-02.githubapp · (github infra)

systemd › hosted-compute-agent (pid 1862 · hosted-compute-agent)

140.82.112.24 :443 (https) TCP
glb-2a3c35-public-internal.githubapp.com [140.82.114.23] :443 (https) TCP · also recorded: hosted-compute-watchdog-prod-iad-02.githubapp · (github infra)

systemd › systemd-resolved (pid 424 · systemd-resolved)

168.63.129.16 :53 (dns) UDP

systemd › python3.12 › python3.12 (pid 1206 · python3.12)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2405 · curl)

example.org [172.66.157.237] :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2396 · curl)

browsermine.com [172.67.206.152] :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2385 · curl)

172.86.88.188 :80 (http) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2399 · curl)

webhook.site [178.63.67.153] :443 (https) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2380 · curl)

198.51.100.10 :80 (http) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2384 · curl)

198.51.100.11 :80 (http) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2379 · curl)

198.51.100.5 :80 (http) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2373 · curl)

203.0.113.1 :80 (http) TCP

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › curl (pid 2377 · curl)

203.0.113.2 :80 (http) TCP

systemd › systemd-networkd (pid 648 · systemd-networkd)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

garnet-org/action

Recorded at the kernel by Garnetfor commit e8cab74 (merge ref)

PR Comment Smoke Test A and B/smoke-a

run 389337302122026-10-16 16:41 UTC

Execution chains

18 destinations · 17 processes

systemd
- hosted-compute-agent[1862 · hosted-compute-agent]
  - Runner.ListenerRunner.Worker
    - bash
      - curl[2393 · curl]step: Curl to chainstack.com
        chainstack.com104.18.5.35:443 (https) · tcp
      - curl[2408 · curl]step: Curl to pastebin.com
        pastebin.com104.20.29.150:443 (https) · tcp
      - curl[2388 · curl]step: Curl to oastify.com
        oastify.com54.77.139.23:443 (https) · tcpalso recorded: PublicInteractionNLB-3bddf5ff6abb91b6.elb
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - curl[2405 · curl]step: Curl to example.org
        example.org172.66.157.237:443 (https) · tcp
      - curl[2396 · curl]step: Curl to browsermine.com
        browsermine.com172.67.206.152:443 (https) · tcp
      - curl[2385 · curl]step: Attempt egress to known IPs
        172.86.88.188:80 (http) · tcp
      - curl[2399 · curl]step: Curl to webhook.site
        webhook.site178.63.67.153:443 (https) · tcp
      - curl[2380 · curl]step: Attempt egress to known IPs
        198.51.100.10:80 (http) · tcp
      - curl[2384 · curl]step: Attempt egress to known IPs
        198.51.100.11:80 (http) · tcp
      - curl[2379 · curl]step: Attempt egress to known IPs
        198.51.100.5:80 (http) · tcp
      - curl[2373 · curl]step: Attempt egress to known IPs
        203.0.113.1:80 (http) · tcp
      - curl[2377 · curl]step: Attempt egress to known IPs
        203.0.113.2:80 (http) · tcp
  - sudo
    - provjobd2475173931[1882 · provjobd2475173931]
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - glb-2a3c35-public-internal.githubapp.com140.82.114.23:443 (https) · tcp(github infra)also recorded: hosted-compute-watchdog-prod-iad-02.githubapp
  - 140.82.112.24:443 (https) · tcp
  - glb-2a3c35-public-internal.githubapp.com140.82.114.23:443 (https) · tcp(github infra)also recorded: hosted-compute-watchdog-prod-iad-02.githubapp
- systemd-resolved[424 · systemd-resolved]
  - 168.63.129.16:53 (dns) · udp
- python3.12
  - python3.12[1206 · python3.12]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
- systemd-networkd[648 · systemd-networkd]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositorygarnet-org/action

WorkflowPR Comment Smoke Test A and B

Jobsmoke-a

Run ID38933730212

Profile UUID01a14597-2248-7388-bff0-23598b95bf2c

Commit SHAe8cab746efc2a8f06482c89ef472fea15a305976(merge ref)

Refrefs/pull/190/merge

Timestamp2026-10-16 16:41:15 UTC

The record is egress-centric; processes without recorded egress do not appear.