Experts from BI.Zone EASM analyzed changes in external IP address services from October 2025 to September 2026. The study found that 15% of IP addresses experienced service updates or terminations during this period. This figure represents approximately one out of every seven addresses, affecting the external perimeter of half the companies studied.

Pavel Zagumennov, head of BI.Zone EASM, noted that infrastructure is dynamic, with new services appearing and old ones being decommissioned or relocated. Without continuous monitoring, assets like forgotten test servers remain accessible from the internet. These unmanaged resources often escape inventory lists and security checks, creating potential entry points for attackers.

To maintain security, companies must regularly update their perimeter data to include all active assets, such as web applications, SSH, and FTP services. BI.Zone EASM provides continuous inventory, vulnerability detection, and security configuration monitoring to help organizations manage these changes and prioritize threats based on actual attacker activity.