which ip address would they check? The ip address of the node that broadcasted the transaction to them? There is a really big chance that this node wasn't the node that created the transaction in the first place, but just a node that was connected to a node that initially received the transaction from the transaction creator (altough that first node also didn't know it received the transaction from the transaction creator, there is just no way to know this for sure)..
Offcourse, if you use online wallets, ip logs can be checked... But you were talking about anonymous wallet...
Also, if you really, really want, core and electrum do support tor, and a VPN can always be used if you want to.