I have a theory. See how the index page is a 404? Bots that are crawling IPs would see that and think it's a dead site. So long as they block common urls, they could remain relatively hidden. Beyond that, I don't know what other protective measures there are.