Every server on the internet is under attack right now. Yours too. Fail2ban bans the IP, your firewall drops the packets, and then... nothing. The attacker — usually a hijacked server someone else is paying for — simply moves to the next victim. Nobody is ever told. Nobody is ever held accountable.

I've spent 17 years running infrastructure — ISP backbones, national broadcaster platforms, government systems. Over the past year I've watched my perimeter logs fill with tens of thousands of blocked attacks, and I realized the most frustrating truth in security: defense alone has no consequences for the attacker.

So I'm building RIPOSTE — a system that turns every blocked attack into action. It works while you sleep. It identifies who is responsible for the attacking machine, builds an evidence file, and makes sure the right people hear about it — in the exact format their systems are built to act on. Not angry emails. Professional, automated, relentless accountability.

Early results from my own infrastructure: hundreds of reports filed, compromised hosts confirmed taken offline, and a growing dataset of which providers act and which look away.

What your support funds:

• Turning my working prototype into a polished, installable tool any sysadmin can run

• Support for more firewalls and platforms (vote as a member!)

• A public dashboard: global attack trends and provider accountability scores

Why membership? Members see behind the curtain — full technical deep-dives, the architecture, beta builds, and a private community of operators fighting back. The internet doesn't get safer by blocking. It gets safer when attacks cost something.

— Arber, Tirana