Report this

What is the reason for this report?

DDoS was on my droplet, and I have been charged for outbound traffic.

Posted on December 12, 2025

My droplet has been attacked and outbound traffic was tremendously high. Will I be charged despite the attack?



This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Heya, @cccce9f944c949848ba85238abd120

If the outbound transfer exceeds the amount included with your Droplets at the end of the cycle, you will be charged $0.01 per excess gigabyte.

However, if the traffic was generated due to a DDoS attack and exceeds your monthly cap, I recommend that you reach out to our support team and raise this query with them.

Regards

Hi there,

In general, outbound bandwidth from a Droplet is billable, even if the traffic is caused by a DDoS attack. DigitalOcean includes a bandwidth allowance per Droplet, but anything above that is normally charged.

If this was a clear attack, it is still worth reaching out to support and explaining the situation. In some cases they may review it or provide guidance, but credits are not guaranteed.

To reduce the risk going forward, put Cloudflare in front of the Droplet. Cloudflare can absorb and filter most DDoS traffic before it ever reaches your server, which protects both availability and bandwidth usage. You can also combine this with a DigitalOcean Cloud Firewall and basic rate limiting at the application or Nginx level.

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Get started for free

Sign up and get $200 in credit for your first 60 days with DigitalOcean.*

*This promotional offer applies to new accounts only.