While I respect the goal of what you're doing, your initial IP address terminates in Arizona. You could be opening yourself up to legal issues there (I am not a lawyer). Maybe operate and run it out of another country? Essentially, depending on how you're communicating with your hackers could be open to application log seizure etc to (attempt) to identify them or clients.
