IP Rotation

ID: TEQ-030
Phase(s): Defence Bypass
Tactic(s): Proxying

Adversaries employ IP rotation to conceal the fact that suspiciously high numbers of connections are all coming from a single point. In IP rotation the adversary rotates their traffic through multiple different proxies in order to give each connection (or group of connections) a new IP address.