The problem is that my ISP called me that some botnet had been
controlled from my ip. Cert.fi had contacted my ISP when they we're
investigating some DDOS or something like that. I think that they
thought that my server is cracked.
I changed my exit nodes policy, now I only allow traffic to http(s),
imap(s) and pop(s) =(.