MIRhosting.com

Our network has been named in reporting on the DDoS attacks around Denmark's November 2025 elections. So we did the only thing that actually answers the question: we went back to our own preserved network data and we're publishing what it shows.

The finding is clear, and it's the same whether you look at the full two-month window or the election week in isolation:

→ 4,468 DDoS anomalies recorded at our edge. Every one inbound. Zero outbound.

In other words, the attacks came IN - toward the customers we connect to the internet - and we defended against them. Nothing anomalous left our network (AS52000) heading toward anyone else. The busiest traffic day of the whole period fell outside the election week entirely, and there was no surge consistent with our network launching anything.

This is also the technically expected result. A distributed DDoS converges on its victims from thousands of scattered machines worldwide - it doesn't pour out of a single transit provider. For a network in our position, "attacks arriving toward our customers, nothing anomalous leaving" is exactly the honest signature you'd expect.

For the record: in connection with these attacks we've received no abuse reports, no requests, and no technical detail through the channels that exist for exactly that purpose - and no specifics from the reporting beyond an unnamed source. A claim no one lets you examine can't be answered on its own terms. So rather than wait, we examined our own data and published it.

We've stated our own limits openly, published the numbers behind every chart, and preserved the full hash-verified dataset for the authorities. On the question of whether these attacks originated from our network, our data answers it - and we're putting it on the table.

Full statement and data: https://mirhosting.com/the-november-2025-danish-election-attacks-what-our-own-network-data-shows

MIRhosting statement following recent media publications

Media publications have appeared in which MIRhosting is linked to the circumvention of sanctions legislation and the facilitation of cyberattacks during the Danish elections at the end of 2025. We have taken note of the content of the publication and firmly deny that we played an active role in this matter. As part of the investigation, we are fully cooperating with the competent authorities and are providing them with all necessary information.

Due to the nature of the allegations, we have temporarily suspended services to Work Titans. We provide this party with colocation services. This means that we exclusively make available physical server space, power, and network connectivity in a third-party data center. The operational management of the hardware, software, and data lies entirely with the customer. As a result, we have no direct access to or visibility into the stored data and applications.

In the meantime, we have also launched an internal investigation into the facts mentioned regarding the elections in Denmark. Based on our preliminary findings, there are no indications that the services over which we can exercise control were actually used to influence the Danish elections. No anomaly or increase was observed in our network traffic during the period mentioned in the publication. In the case of large-scale DDoS attacks, this would have been expected. Prior to the media publication, we had also received no complaints, abuse reports, or official requests regarding suspicious activities or misuse of our network.

Our regular operational activities are continuing in the meantime, and the services provided to our other customers remain fully intact.

In the carousel below, you can find screenshots showing: total traffic from all our locations, traffic on one of our uplink ports at our NL location from 13 to 19 November 2025, and traffic on the same uplink port for the full month of November 2025.

Storage as part of the service

Infrastructure doesn’t always start in a rack.
Sometimes, it starts in the warehouse.

We receive, store, and prepare client equipment in advance —
so it’s ready when you need it.

Less delays. Fewer risks. Easier scaling.

https://mirhosting.com/private-colocation

The International Piano Competition for Young Musicians takes place in Enschede every four years and celebrates its 25th anniversary this year.

As a sponsor, MIRhosting is proud to support the competition and help make the livestream happen: working on stable streaming, audio sync, and camera coordination so audiences in the hall and online can follow the performances smoothly.

And yes 😎 our Remote Hands team can handle this as well.

https://www.youtube.com/playlist?list=PLWC1ql3LjAabEJHkuCRAtNCzcZhwQuZbu

When technology meets culture: supporting young musicians and streaming the Enschede competition live for audiences around the world.

Internationaal pianoconcours in Enschede krijgt steun van technologiepartner MIRhosting - mediacontent.nu Het tweejaarlijkse concours van de International Piano Competition for Young Musicians kan ook de komende editie rekenen op steun van technologiebedrijf MIRhosting. Andrey Nesterenko, oprichter van dit IT-bedrijf, was zelf ooit deelnemer aan het concours.

Let’s get acquainted. We’re MIRhosting 😎

MIRhosting has been operating since 2004. We started in hosting, brought virtualization into production early (back in the 2000s), and later became one of Jelastic’s early partners - back when container-based PaaS was only starting to go mainstream.

Today our main focus is managed colocation. It’s an all-in setup that lets customers build sovereign private infrastructure in Europe, without having to assemble everything themselves or run a large in-house infrastructure team. For many companies, this is now simply practical: predictable jurisdiction, control over hardware and data, and stable availability.

We operate across 10+ facilities, with Tier-1 upstream connectivity and a broad peering footprint - including Google, Meta, Cloudflare, and local peers such as Odido. That gives us flexibility on geography and latency, without turning the network into a patchwork.

Security is a key priority for us in 2026. We’re seeing global risks increase, and we’re preparing technical measures to better protect customers from modern network threats and attacks.

If you’re building or moving infrastructure to Europe and want to keep control (without relying on hyperscalers), let’s talk.
Learn more about MIRhosting: mirhosting.com/about-us