Comment by praptak

If I ever set up a hidden service I'll make sure it lives on a box that has no public IP whatsoever. Preferably a physical box.