# Please help! :{{{{{{{{ My TOR Exits are under DDoS attack!
**URL:** https://forum.torproject.org/t/please-help-my-tor-exits-are-under-ddos-attack/10588
**Category:** Relay Operator
**Created:** [December 12, 2023, 9:23am UTC](https://forum.torproject.org/t/please-help-my-tor-exits-are-under-ddos-attack/10588 "2023-12-12T09:23:08Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@quidok](https://forum.torproject.org/u/quidok)
#### Post date: [December 12, 2023, 9:23am UTC](https://forum.torproject.org/t/please-help-my-tor-exits-are-under-ddos-attack/10588/1 "2023-12-12T09:23:08Z")
This morning I randomly logged into two of my TOR Exit SSH servers and nyx couldn’t even start took like 2 minutes to load into nyx.
Then i found out CPU usage is over 100% there is barely 20 Mbps Download but 200 Mbps upload!!!
Please ignore my vulgar nickname I’m sorry for that tho… But i need to help with this someone is using my relay for DDoS attack!
Edit: I upgraded two specified realys to 0.4.8.10. And issue seem to be fixed on my side [It may because relays lost all flags after restart and DDoS attack still goes through other relays!! Watch out}
---
### Author:  [@cozybeardev](https://forum.torproject.org/u/cozybeardev)
#### Post date: [December 12, 2023, 11:12am UTC](https://forum.torproject.org/t/please-help-my-tor-exits-are-under-ddos-attack/10588/2 "2023-12-12T11:12:36Z")
What makes you think it’s a ddos? Could just as well be genuine load. Depending on hardware and used bandwidth, it’s not rare to be \>95% cpu continuously. Some of my nodes are in this state. You should monitor the server using e.g. netdata to reliably detect such attacks. I have seen attacks happen which I had to mitigate (while back, not recently), but the only reason I saw them in the first place was broad spectrum health checking.