I don't know about AOL, but I have seen companies that
have constantly changing IPs. The situation where you see
that is when you have a cluster of load-balanced machines
working as the proxy. In that case each request from the
browser is directed to a different proxy and the outside
world will see the session pretty much evenly divided
among several IPs.
Which is why IP is not a good authentication mechanism...