Skip to main content

Public record database

Takedown Index

The Internet Takedown Index documents law enforcement seizures, sinkholes, takeovers, and shutdowns of criminal internet infrastructure. Every entry traces to a cited source.

104 takedowns indexed Across 37 jurisdictions
Last reviewed August 20, 2026
Takedown Date Category Lead organization Jurisdiction Status Derived from the recorded end date. A date in the past reads Completed, no date reads Ongoing. The dataset carries no separate status column.
Operation PowerOFF December 2024 wave ID: td_2024_poweroff_dec Dec 1, 2024 DDoS for hire Not established International Completed
Operation Cronos wave 1 ID: td_2024_cronos_w1 Feb 19, 2024 Ransomware NCA and FBI International Completed
Operation PowerOFF December 2022 wave ID: td_2022_poweroff_dec Dec 13, 2022 DDoS for hire FBI International Completed

Showing 1 to 3 of 3 takedowns

3 results

December 2024

Operation PowerOFF

27 booter and stresser platforms DDoS for hire

Lead
Not established
Result
27 platforms taken offline and domains seized.
Accountability
3 apprehended
Return status
Not established in the public record

February 2024

Operation Cronos

LockBit Ransomware

Lead
NCA and FBI
Result
34 servers seized across eight countries; source code and affiliate data obtained; more than 1,000 decryption keys recovered; more than 200 cryptocurrency wallets frozen; approximately 14,000 rogue accounts closed; leak site taken over and operated by law enforcement.
Accountability
4 charged, 3 apprehended, 2 convicted, and 3 publicly wanted
Return status
Returned under the same operators

December 2022

Operation PowerOFF

48 booter and stresser services DDoS for hire

Lead
FBI
Result
48 domains seized and redirected to seizure notices.
Accountability
6 charged
Return status
Not established in the public record

Previous Page 1 of 1 Next

Filters

Filter takedowns