Comment

Comment by john_strinlai

indeed, the actual case report (https://www.documentcloud.org/documents/28831278-govuscourts...) states:

"technical and network-activity records from fly.io included:

SSH session logs (CSV format) listing multiple "New SSH session" entries for <redacted> with verified=true between approximately 2026-03-26 and 2026-04-01, timestamped in UTC.

outbound-connection records (CSV format) reflecting numerous TCP port 443 connections originating from internal fly.io addresses <redacted> to external IP addresses attributed to AMAZON-02 (Amazon Web Services) in the US and Cloudflarenet (Cloudflare)".

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton