I was wondering how hackers hide their identities while hacking? For instance, consider an attacker who wants to hack a website that has a SQL injection vulnerability. If the attacker uses automated tools to send malicious payloads, the admin of the website can check the payload sender's IP and readily find who sends these payloads.
What is it required for attackers to change their IP addresses or use proxy tools every time they want to attack a website?