feat: new endpoints added for health checks #1

nyrahul · 2023-06-13T06:35:01Z

gRPC endpoints
health related checks added

nyrahul · 2023-06-13T18:20:17Z

Network Behavior Summary

Binds

Status	PROTOCOL	COMMAND	BIND PORT	ADDRESS	COUNT
🟢	AF_INET	/home/sediment/build/verifier	8100	0.0.0.0	1
🚨	AF_INET	/home/vault/appver	8200	0.0.0.0	1
🚨	AF_NETLINK	/home/sediment/build/verifier			2

Egress Connections

Status	PROTOCOL	COMMAND	POD/SVC/IP	PORT	NAMESPACE	LABELS	COUNT
🟢	TCP	/usr/bin/openssl	172.67.75.245	443			1
🟢	TCP	/usr/bin/openssl	142.251.33.78	443			1

Ingress Connections

Status	PROTOCOL	COMMAND	POD/SVC/IP	PORT	NAMESPACE	LABELS	COUNT
🟢	TCP	/bin/vault	127.0.0.1	8200			179
🚨	TCP	/bin/curl	svc/vmservice	8200	msdeploy	app=vmservice	10

System access behavior Summary

Sensitive asset access

Status	SRC PROCESS	DESTINATION FILE PATH	COUNT
🟢	/home/sediment/build/verifier	/	2
🟢	/home/sediment/build/verifier	/dev/	13
🟢	/home/sediment/build/verifier	/etc/passwd	1
🟢	/home/sediment/build/verifier	/home/sediment/configs/boards/+	1
🟢	/home/sediment/build/verifier	/home/sediment/data/	13
🟢	/home/sediment/build/verifier	/lib/x86_64-linux-gnu/	12

Status	PARENT PROCESS	PROCESS	COUNT
🟢	/bin/sh	/usr/bin/mkdir	28
🟢	/home/sediment/build/prover	/bin/sh	10
🟢	/usr/bin/containerd-shim-runc-v2	/home/sediment/build/prover	1
🚨	/usr/bin/dash	/home/sediment/appverify	20

Findings

Server port status

Status	Name	Address	Status	Version	Ciphersuite	Hash	Signature	Verification
🚨	firewall	localhost:49180	NO_TLS
🚨	verifier	localhost:49181	NO_TLS
🚨	app_server	localhost:49182	NO_TLS
🟢	Google	google.com:443	TLS	TLSv1.3	TLS_AES_256_GCM_SHA384	SHA256	ECDSA	OK
🟢	AccuKnox	app.accuknox.com:443	TLS	TLSv1.3	TLS_AES_256_GCM_SHA384	SHA256	ECDSA	OK
🚨	BadSSL	self-signed.badssl.com:443	TLS	TLSv1.2	ECDHE-RSA-AES128-GCM-SHA256	SHA512	RSA	self-signed certificate
🚨	BadSSL	expired.badssl.com:443	TLS	TLSv1.2	ECDHE-RSA-AES128-GCM-SHA256	SHA512	RSA	certificate has expired

swarit-pandey · 2023-12-19T08:52:13Z

Behavior Summary [2023-12-19 08:30:25 UTC]

Workload Information

Cluster: default
Namespace: kubecost
Type/Name: deployment/kubecost-cost-analyzer

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Delta
`TCP`	`N/A`	`52.92.193.58`	`443`	`[+ 52.92.193.58]`
`TCP`	`N/A`	`52.92.193.58`	`443`	`[+ 443]`
`TCP`	`N/A`	`52.92.193.58`	`443`	`[+ TCP]`

Workload Information

Cluster: default
Namespace: accuknox-dev-mongodb
Type/Name: statefulset/accuknox-dev-mongodb-rs0

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Delta
`TCP`	`N/A`	`52.219.104.106`	`443`	`[+ 52.219.104.106]`
`TCP`	`N/A`	`52.219.101.137`	`443`	`[+ 443]`
`TCP`	`N/A`	`52.219.101.137`	`443`	`[+ TCP]`
`TCP`	`N/A`	`52.219.109.233`	`443`	`[+ 52.219.109.233]`
`TCP`	`N/A`	`52.219.101.137`	`443`	`[+ 52.219.101.137]`

Workload Information

Cluster: default
Namespace: ingress-nginx
Type/Name: deployment/ingress-nginx-controller

Ingress Connections

Protocol	Command	POD/SVC/IP	Port	Delta
`TCP`	`N/A`	`185.224.128.191`	`80`	`[+ 185.224.128.191]`
`TCP`	`N/A`	`185.224.128.191`	`80`	`[+ 80]`
`TCP`	`N/A`	`46.37.21.63`	`443`	`[+ TCP]`
`TCP`	`N/A`	`46.37.21.63`	`443`	`[+ 46.37.21.63]`
`TCP`	`N/A`	`46.37.21.63`	`443`	`[+ 443]`

Workload Information

Cluster: default
Namespace: accuknox-loki
Type/Name: statefulset/loki-write

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Delta
`TCP`	`N/A`	`52.219.176.169`	`443`	`[+ 52.219.176.169]`

swarit-pandey · 2023-12-22T05:36:24Z

Report [2023-12-22 04:20:45 UTC]

Workload Information

Cluster: default
Namespace: accuknox-dev-istio-ext-authz
Type/Name: deployment/istio-ext-authz

Ingress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCPv6`	`N/A`	+ 10.4.3.149	`8000`	`accuknox-dev-cluster-mgmt`	`Pod`
`TCPv6`	`N/A`	`10.4.3.149`	+ 8000	`accuknox-dev-cluster-mgmt`	`Pod`
+ TCPv6	`N/A`	`10.4.3.149`	`8000`	`accuknox-dev-cluster-mgmt`	`Pod`

Workload Information

Cluster: default
Namespace: accuknox-dev-monitoring
Type/Name: deployment/prometheus-grafana

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`N/A`	+ 99.78.180.84	`443`	`N/A`	`N/A`
`TCP`	`N/A`	`3.128.56.134`	+ 443	`N/A`	`N/A`
+ TCP	`N/A`	`3.128.56.134`	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 99.78.178.101	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 99.78.180.69	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.128.56.174	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.128.56.134	`443`	`N/A`	`N/A`

Workload Information

Cluster: default
Namespace: accuknox-agents
Type/Name: deployment/policy-enforcement-agent

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`N/A`	+ 3.140.206.130	`443`	`N/A`	`N/A`
`TCP`	`N/A`	`3.140.206.130`	+ 443	`N/A`	`N/A`
+ TCP	`N/A`	`3.140.206.130`	`443`	`N/A`	`N/A`

Workload Information

Cluster: default
Namespace: sa-test
Type/Name: deployment/my-deployment

Process/File Summary

Source Path	Destination Path	Status
	+ /docker-entrypoint.d/30-tune-worker-processes.sh	Allow

Workload Information

Cluster: default
Namespace: accuknox-dev-saltstack
Type/Name: deployment/saltmaster

Process/File Summary

Source Path	Destination Path	Status
	+ /bin/uname	Allow

Workload Information

Cluster: default
Namespace: ingress-nginx
Type/Name: deployment/ingress-nginx-controller

Ingress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`N/A`	+ 51.159.164.227	`443`	`N/A`	`N/A`
`TCP`	`N/A`	`205.210.31.168`	+ 80	`N/A`	`N/A`
+ TCP	`N/A`	`198.235.24.145`	`443`	`N/A`	`N/A`
`TCP`	`N/A`	`198.235.24.145`	+ 443	`N/A`	`N/A`
`TCP`	`N/A`	+ 192.241.196.121	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 18.156.135.145	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 66.160.133.233	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 46.101.4.164	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 176.123.8.239	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 65.49.1.70	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 103.67.163.199	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 167.94.146.57	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 65.49.1.14	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 54.146.230.164	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 157.245.176.143	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 45.77.69.116	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 20.106.209.72	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 198.199.114.90	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 192.241.223.4	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 146.190.47.101	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 172.104.11.106	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 192.241.196.106	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 182.44.8.254	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 43.131.62.4	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 97.107.133.58	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 43.159.129.209	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 143.198.143.69	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 66.160.133.239	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 51.68.228.235	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 159.223.199.149	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 172.105.128.13	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 185.180.140.6	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 104.248.236.195	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 18.234.38.199	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 149.18.84.51	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 50.116.53.105	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 54.159.21.79	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 209.141.60.74	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 45.155.126.4	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 185.180.140.5	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 107.170.246.35	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 172.104.9.128	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 87.236.176.144	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 87.236.176.30	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 87.236.176.143	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 185.254.196.186	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 87.236.176.131	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 87.236.176.140	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 87.236.176.136	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 87.236.176.125	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 157.245.0.148	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 87.236.176.124	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 87.236.176.117	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 87.236.176.115	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 87.236.176.111	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 208.109.201.170	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 78.153.140.219	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 194.187.176.143	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 192.155.90.220	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 4.206.216.182	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 167.248.133.124	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 198.235.24.135	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 198.46.171.16	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 192.241.193.64	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 172.104.11.51	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 173.230.139.107	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 185.180.143.71	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 97.107.130.129	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 159.223.138.47	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 54.90.231.63	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 167.172.89.248	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 198.235.24.6	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 164.52.0.93	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 142.4.218.114	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 138.68.248.68	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 38.62.230.250	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 173.255.198.63	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 45.56.77.211	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 198.235.24.144	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 192.241.197.51	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 68.69.186.30	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 192.241.194.76	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 35.176.131.227	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 13.40.122.25	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 165.232.165.237	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 5.196.102.68	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 35.203.210.52	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 130.61.73.250	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 42.192.53.183	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 135.125.244.48	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 205.210.31.168	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 198.199.108.45	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 198.235.24.145	`443`	`N/A`	`N/A`

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`N/A`	+ 172.20.0.1	`443`	`default`	`Service`
`TCP`	`N/A`	`172.20.0.1`	+ 443	`default`	`Service`
+ TCP	`N/A`	`10.4.1.117`	`8000`	`splunk-operator`	`Pod`
`TCP`	`N/A`	+ 10.4.1.117	`8000`	`splunk-operator`	`Pod`
`TCP`	`N/A`	`10.4.1.117`	+ 8000	`splunk-operator`	`Pod`

Workload Information

Cluster: default
Namespace: accuknox-dev-vulnerability-scanner
Type/Name: deployment/vulnerability-scanner

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`/usr/bin/docker`	+ 44.196.174.155	`443`	`N/A`	`N/A`
`TCP`	`N/A`	`172.217.2.42`	+ 443	`N/A`	`N/A`
+ TCP	`N/A`	`172.217.2.42`	`443`	`N/A`	`N/A`
`TCP`	+ /usr/bin/docker	`142.250.111.82`	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 172.217.4.74	`443`	`N/A`	`N/A`
`TCP`	`/usr/local/bin/trivy`	+ 140.82.112.33	`443`	`N/A`	`N/A`
`TCP`	+ /usr/local/bin/trivy	`169.254.169.254`	`80`	`N/A`	`N/A`
`TCP`	`N/A`	+ 34.203.80.76	`443`	`N/A`	`N/A`
`TCP`	`/usr/local/bin/trivy`	+ 185.199.110.154	`443`	`N/A`	`N/A`
`TCP`	`/usr/local/bin/trivy`	+ 185.199.109.154	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 142.250.191.106	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 142.250.190.138	`443`	`N/A`	`N/A`
`TCP`	`/usr/bin/docker`	+ 142.250.111.82	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 34.224.219.70	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 142.251.177.82	`443`	`N/A`	`N/A`
`TCP`	`/usr/local/bin/trivy`	+ 142.251.178.82	`443`	`N/A`	`N/A`
`TCP`	`/usr/local/bin/trivy`	+ 169.254.169.254	`80`	`N/A`	`N/A`
`TCP`	`/usr/local/bin/trivy`	`169.254.169.254`	+ 80	`N/A`	`N/A`
`TCP`	`N/A`	+ 142.250.191.138	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 54.156.243.51	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 172.217.2.42	`443`	`N/A`	`N/A`

Workload Information

Cluster: default
Namespace: cert-manager
Type/Name: deployment/cert-manager-webhook

Ingress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCPv6`	`N/A`	+ 10.4.1.53	`10250`	`N/A`	`N/A`
`TCPv6`	`N/A`	`10.4.1.53`	+ 10250	`N/A`	`N/A`
+ TCPv6	`N/A`	`10.4.1.53`	`10250`	`N/A`	`N/A`

Workload Information

Cluster: default
Namespace: istio-system
Type/Name: deployment/istio-ingressgateway

Ingress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`N/A`	+ 10.4.2.175	`N/A`	`accuknox-dev-monitoring`	`Pod`
`TCP`	`N/A`	+ 0	`N/A`	`accuknox-dev-monitoring`	`Pod`
+ TCP	`N/A`	`10.4.2.175`	`N/A`	`accuknox-dev-monitoring`	`Pod`

Workload Information

Cluster: default
Namespace: accuknox-dev-monitoring
Type/Name: deployment/prometheus-prometheus-cloudwatch-exporter

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCPv6`	`N/A`	+ 3.128.56.188	`443`	`N/A`	`N/A`
`TCPv6`	`N/A`	`99.78.178.101`	+ 443	`N/A`	`N/A`
+ TCPv6	`N/A`	`99.78.178.101`	`443`	`N/A`	`N/A`
`TCPv6`	`N/A`	+ 99.78.180.69	`443`	`N/A`	`N/A`
`TCPv6`	`N/A`	+ 99.78.178.101	`443`	`N/A`	`N/A`

Workload Information

Cluster: default
Namespace: accuknox-dev-mongodb
Type/Name: deployment/percona-server-mongodb-operator

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`N/A`	+ 52.219.232.201	`443`	`N/A`	`N/A`
`TCP`	`N/A`	`52.219.232.201`	+ 443	`N/A`	`N/A`
+ TCP	`N/A`	`52.219.232.201`	`443`	`N/A`	`N/A`

Workload Information

Cluster: default
Namespace: testing
Type/Name: deployment/k8sgpt-deployment

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
- SOMETHING_ELSE	`N/A`	`172.20.0.1`	`443`	`default`	`Service`
+ TCP	`N/A`	`172.20.0.1`	`443`	`default`	`Service`

Workload Information

Cluster: default
Namespace: kubewatch
Type/Name: deployment/kubewatch

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`N/A`	+ 18.216.36.190	`443`	`N/A`	`N/A`
`TCP`	`N/A`	`3.143.53.1`	+ 443	`N/A`	`N/A`
+ TCP	`N/A`	`3.143.53.1`	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.143.19.65	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.134.44.134	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.129.123.235	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.142.111.40	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.143.53.1	`443`	`N/A`	`N/A`

Workload Information

Cluster: default
Namespace: accuknox-dev-policy-service
Type/Name: deployment/policymanagement

Ingress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`N/A`	+ 10.4.3.88	`15001`	`accuknox-dev-policy-service`	`Pod`
`TCP`	`N/A`	`10.4.3.88`	+ 15001	`accuknox-dev-policy-service`	`Pod`
+ TCP	`N/A`	`10.4.3.88`	`15001`	`accuknox-dev-policy-service`	`Pod`

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`N/A`	+ 10.4.3.88	`8080`	`accuknox-dev-policy-service`	`Pod`
`TCP`	`N/A`	`10.4.1.74`	+ 8080	`accuknox-dev-policy-service`	`Pod`
+ TCP	`N/A`	`10.4.1.74`	`8080`	`accuknox-dev-policy-service`	`Pod`
`TCP`	`N/A`	+ 10.4.1.74	`8080`	`accuknox-dev-policy-service`	`Pod`

Workload Information

Cluster: default
Namespace: testing
Type/Name: deployment/k8sgpt-operator-controller-manager

Ingress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCPv6`	`N/A`	+ 10.4.1.13	`8081`	`kube-system`	`Pod`
- NOT_TCPv6	`N/A`	`10.4.1.88`	`8443`	`accuknox-dev-monitoring`	`Pod`
+ TCPv6	`N/A`	`10.4.1.88`	`8443`	`accuknox-dev-monitoring`	`Pod`

Workload Information

Cluster: default
Namespace: accuknox-dev-cluster-mgmt
Type/Name: deployment/cluster-management-service

Ingress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`N/A`	+ 10.4.3.149	`15001`	`accuknox-dev-cluster-mgmt`	`Pod`
`TCP`	`N/A`	`10.4.3.149`	+ 15001	`accuknox-dev-cluster-mgmt`	`Pod`
+ TCP	`N/A`	`10.4.3.149`	`15001`	`accuknox-dev-cluster-mgmt`	`Pod`

Workload Information

Cluster: default
Namespace: test-dev2
Type/Name: deployment/dev2

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`N/A`	+ 140.82.113.5	`443`	`N/A`	`N/A`
`TCP`	`N/A`	`140.82.112.6`	+ 443	`N/A`	`N/A`
+ TCP	`N/A`	`140.82.112.6`	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 140.82.112.6	`443`	`N/A`	`N/A`

Workload Information

Cluster: default
Namespace: cattle-system
Type/Name: deployment/cattle-cluster-agent

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`N/A`	`/usr/lib/git/git-remote-http`	`N/A`	`N/A`	`N/A`	`N/A`
+ UDP	`/usr/lib/git/git-remote-http`	`N/A`	`N/A`	`N/A`	`N/A`
`TCP`	+ /usr/lib/git/git-remote-http	`34.208.213.149`	`443`	`N/A`	`N/A`
`TCP`	`/usr/lib/git/git-remote-http`	+ 34.208.213.149	`443`	`N/A`	`N/A`
`TCP`	`/usr/lib/git/git-remote-http`	`34.208.213.149`	+ 443	`N/A`	`N/A`
+ TCP	`/usr/lib/git/git-remote-http`	`34.208.213.149`	`443`	`N/A`	`N/A`

Workload Information

Cluster: default
Namespace: accuknox-sre-test
Type/Name: deployment/my-deployment

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`UDP`	- /home/cluster	`N/A`	`N/A`	`N/A`	`N/A`
`UDP`	+ /home/cluster-mgmt/main	`N/A`	`N/A`	`N/A`	`N/A`

Bind Connections

Protocol	Command	Bind Port	Bind Address
- SOMETHING_ELSE	`/usr/sbin/nginx`	`80`	`::`
+ AF_INET6	`/usr/sbin/nginx`	`80`	`::`
`AF_INET`	`N/A`	`80`	+ 0.0.0.0
`AF_INET6`	`N/A`	+ 80	`::`
+ AF_INET	`N/A`	`80`	`0.0.0.0`
`AF_INET6`	`N/A`	`80`	+ ::
+ AF_INET6	`N/A`	`80`	`::`

Workload Information

Cluster: default
Namespace: kubecost
Type/Name: deployment/kubecost-cost-analyzer

Egress Connections

Protocol	Command	POD/SVC/IP	Port	Namespace	Type
`TCP`	`N/A`	+ 52.218.178.218	`443`	`N/A`	`N/A`
`TCP`	`N/A`	`3.5.83.0`	+ 443	`N/A`	`N/A`
+ TCP	`N/A`	`3.5.83.0`	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.218.178.17	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.19.192.161	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.92.147.122	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.95.88.14	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.46.68.57	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 99.83.80.155	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.82.209.55	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.94.214.26	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 177.72.245.184	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 99.78.180.158	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.95.127.139	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 99.78.132.94	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.46.96.130	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 99.77.62.123	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 54.239.29.8	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.94.137.29	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 15.221.12.231	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.94.52.55	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 54.239.28.168	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.95.193.67	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 13.248.32.123	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 13.248.8.79	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.46.196.96	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.95.193.73	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.46.200.93	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 176.32.118.53	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.119.209.79	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.5.78.197	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.218.236.145	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.92.225.50	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.218.180.65	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.92.154.10	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.5.82.189	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.5.78.0	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.92.161.218	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.218.169.137	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.95.80.15	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 54.239.23.99	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.94.137.23	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 67.220.228.6	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.46.72.50	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 209.54.181.192	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 15.221.8.218	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 99.78.248.125	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.94.141.13	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 99.83.82.12	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 67.220.226.66	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 13.248.4.70	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.94.96.60	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.119.136.66	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.46.100.109	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 176.32.118.30	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 99.78.176.242	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 54.240.249.157	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 99.77.60.113	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.218.177.225	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 99.82.187.133	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.5.83.139	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.92.139.90	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.92.229.226	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.5.87.208	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.92.196.242	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.21.25.241	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.92.250.146	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.92.149.154	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.92.213.50	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.92.250.18	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.5.76.103	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.218.181.249	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.5.83.17	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 52.92.128.130	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.135.255.101	`443`	`N/A`	`N/A`
`TCP`	`N/A`	+ 3.5.83.0	`443`	`N/A`	`N/A`

Update README.md

82e753e

Update README.md

2cd1f85

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: new endpoints added for health checks #1

feat: new endpoints added for health checks #1

Uh oh!

nyrahul commented Jun 13, 2023 •

edited

Loading

Uh oh!

nyrahul commented Jun 13, 2023 •

edited

Loading

Uh oh!

swarit-pandey commented Dec 19, 2023

Uh oh!

swarit-pandey commented Dec 22, 2023

Uh oh!

Uh oh!

feat: new endpoints added for health checks #1

Are you sure you want to change the base?

feat: new endpoints added for health checks #1

Uh oh!

Conversation

nyrahul commented Jun 13, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

nyrahul commented Jun 13, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Network Behavior Summary

Binds

Egress Connections

Ingress Connections

System access behavior Summary

Sensitive asset access

Findings

Server port status

Uh oh!

swarit-pandey commented Dec 19, 2023

Behavior Summary [2023-12-19 08:30:25 UTC]

Workload Information

Egress Connections

Workload Information

Egress Connections

Workload Information

Ingress Connections

Workload Information

Egress Connections

Uh oh!

swarit-pandey commented Dec 22, 2023

Report [2023-12-22 04:20:45 UTC]

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Workload Information

Uh oh!

Uh oh!

nyrahul commented Jun 13, 2023 •

edited

Loading

nyrahul commented Jun 13, 2023 •

edited

Loading