—Web Defacement attacks in Indonesia are getting worse, many web servers are attacked by the attackers around the world and also from local itself. As the number of web servers is increasing in defacement, the authors want to investigate further on this web defacement attacks. Analysis of web defacement Indonesia who want to investigate in large part 5 Domain Name Server (DNS) that is .go.id (government), .co.id (commercial), .or.id (organization), .net.id (internet) and .Ac.id (academic). Web Defacement action appeared briefly growth increase, it could be triggered by the increasing skill of young people, teenagers in hacking, web defacement tools easily get it on the internet, laptops and tablets are increasingly sophisticated, many hackers community, which increases the amount of book hacking, web server built still using a content management server (CMS) and many other causes, so it needs to be further investigated. Methodology is performed descriptive statistical analysis of the amount of each ter-DNS web defacement. The results of the descriptive analysis will be used for anti web defacement of the web groups. Knowing the desired output is statistically the greatest of all five parts of the government, commercial, organization, academic and internet domain, the next output is find out the cause of this web defacement in Indonesia and conduct anti web defacement to various causes.