It's complicated further because the witness nodes IP's aren't always even publicly accessible, and they can be connected through VPN's to redundant nodes all over the world (example).
These attacks will only make us stronger ;)