Period: October 2026 Current Period

Data as of 24 October 2026, 03:20 WITA, covering up to 23 October 2026. Updated automatically every day.

10.615.990
Events Processed
429.868
Significant Events
148
Reporting Assets
3.205
Automatic Blocking

The figures on this page are the number of events recorded by the monitoring systems, not the number of successful attacks. Most of them are blocked attempts or automated scans from the internet. Significant events are events with a severity level of 7 or higher on a scale of 0–15.

This period is still in progress. The figures above are not final and will keep increasing until the month ends; data is updated automatically every day.

Layered Defence

What Is Stopped Before Reaching Users


41.132
Web application attack attempts

SQL injection, XSS, and path traversal.

Distribution

Event Severity


Critical (13-15) 277
High (10-12) 189.055
Medium (7-9) 240.536
Low / informational (0-6) 10.186.122

Security Event Classification

Attacks on applications (attack) 1.567.711
Authentication failures 586.427
System file changes (FIM) 197.597
Web scanning (web service scanning) 102.772

A single event can carry more than one classification, so the figures above are not meant to be added up.

Reference Framework

Attack Techniques (MITRE ATT&CK)


MITRE ATT&CK maps how attackers operate, not merely how many events were recorded. Technique names are kept in their original form so they can be looked up at attack.mitre.org.

Valid Accounts 1.971.173
Remote Services 940.471
Stored Data Manipulation 146.468
Sudo and Sudo Caching 130.221
Password Guessing 93.238
Windows Command Shell 77.977
Vulnerability Scanning 55.665
File and Directory Discovery 33.747

Asset Types with the Most Events

Regional government agency portals and applications 3.898.167
Network authentication services 3.406.596
Email and collaboration services 1.367.403
Security operations centre infrastructure 625.791
Internal application servers 622.137
Monitoring and audit systems 279.643
Automation and support services 200.698
CSIRT portal 96.920

Assets are presented by service type. System identities are not published. A high number of events does not mean the asset is the most vulnerable — public-facing services naturally receive more automated attempts.

Period over period

Event Volume Trend


PeriodProcessedSignificant
June 2026 9.993.522 32.844
July 2026 6.053.217 574.653
August 2026 8.540.271 767.430
September 2026 13.103.454 3.946.801
October 2026 10.615.990 429.868

Data is sourced from the centralised security monitoring system, endpoint monitoring system, internet access gateway, and perimeter devices operated by the East Kutai Regency Government. System identities, internal addresses, and work unit names are not published. Full details are available in the Monthly Reports.