What is IP Address Rotation?
IP Rotation is the process of distributing allocated IPs to a resource randomly or in a configurable manner specified by the administrator.
for example, When a DSL user connects to his ISP, he is assigned an IP address from a pool of available IPs in his ISP's network topology. His internet address becomes whichever IP was allocated to him. If a disconnection occurs, the ISP will allocate next available IP from the available IP pool implementing IP address rotation transparently to the user.
Internet facing daemons on many hosts already implement automatic IP address rotation for incoming traffic. For example, a DNS server might change the IP address of a web server in a round-robin fashion to facilitate load-balancing of incoming traffic or equal distribution of resources among role-based access control lists. This method is commonly employed by large datacenters and organizations.
Real use of IP rotation can be observed for outgoing internet traffic. Since source IP is the foundation of access controls by destination firewalls in all forms of internet communications; by rotating IP addresses, a server, host or service can evade all restrictions put in place.
IP Address Rotation Methods
There are 4 main strategies in IP Rotation implementations.
Pre-configured IPs: IP rotation takes place at 1 minute intervals. Every minute, your IP address will change to a different one. Setup is automatic, client has no control.
Random IPs: Each connection initiated by the client is assigned a randomly rotating IP. Setup is automatic, client has no control.
Burst IPs: IP addresses are rotated per specified number of hits, usually 10. If you initiated 10 connections, your 11th will be from a different IP. This is perfect option for bursts of hits at short intervals. Say you want to dispatch 10,000 hits in a second, this option would take care of it where they all would go out from the same IP in pre-configured IP option. Setup is automatic, client has no control.
Specific IPs: Client can choose which IP address he wants to use for the outgoing connection by specifying it in his software. For example, connection to x5.net:5/10.10.10.10 will send out your connection from IP address 10.10.10.10
IP Address Rotation illegitimate uses
Perhaps the most widespread abuse of IP address rotation is from spammers. Almost all spam farms employ some method of IP rotation to fool destination mail servers into believing that email connections are coming from different net blocks. The aim is to be able to deliver as many emails as possible so that their return rate on targeted product is high.
Spammers also deploy rotating IPs in their link exchange farms for rouge SEO firms called BlackHat SEOs. The target is to deceive major Search Engines for better pageranks.
There are various DDOS scenarios possible for when IPs are rotated. However, perpetrators of these attacks mostly prefer botnets.
IP Address Rotation legitimate uses
Anti-counterfeiting and anti-piracy agencies deploy IP rotation
methods for data harvesting or for researching questionable content
Business intelligence companies use IP rotation to harvest,
retrieval, scrape or mine data for performance metrics and data
analytics.
Quantative and qualitative research companies deploy IP rotation to
observe variations.
Data triangulation companies use IP rotation to verify the validity
of their content.
Data warehouses use IP rotation to access a wider selection from
their destinations.
Corporate firms use IP rotation to eliminate price gouging and
geotargeted presentation.
SEO companies use IP rotation to check keyword rankings from
different localities.