"technical and network-activity records from fly.io included:
SSH session logs (CSV format) listing multiple "New SSH session" entries for <redacted> with verified=true between approximately 2026-03-26 and 2026-04-01, timestamped in UTC.
outbound-connection records (CSV format) reflecting numerous TCP port 443 connections originating from internal fly.io addresses <redacted> to external IP addresses attributed to AMAZON-02 (Amazon Web Services) in the US and Cloudflarenet (Cloudflare)".