Some users are unable to access Railway-hosted applications or railway.com because network providers and security services have blocked Railway IP addresses.

We’ve confirmed that a third party is sending scanning traffic using forged Railway source IP addresses. This traffic does not originate from Railway’s network. The spoofing does not require access to Railway infrastructure, and these reports are not evidence that Railway services or customer workloads have been compromised.

We have found no evidence that this is in any way tied to the October 21 security incident.

We are working with network providers and security vendors to remove the resulting blocks and correct reputation listings. Access may remain affected on individual networks until those blocks are lifted.

If you are affected, ask your network administrator or provider to review any blocks on Railway IP addresses and share this incident notice with them. They can allow legitimate access to your application while retaining protections against unsolicited scanning traffic. Using another network may provide temporary access.

We will provide updates as this work progresses.