I don&#x27;t see why you need a &quot;valid legal request&quot; to remove clearly criminal operations from your network.<p>The conversation with almost every other network operator that I have goes something like this:<p>Me: &quot;hey guys, the host at [operators ip address] is spamming&#x2F;serving malware&#x2F;phishing&quot;<p>Them: &quot;Hey thx, we&#x27;ll check it out &#x2F; notify customer&quot;<p>If I check out a few days later, usually the criminals aren&#x27;t on these people&#x27;s network anymore.<p>With you it&#x27;s like<p>Me: &quot;hey guys, the host at [ip address] is spamming&#x2F;serving malware&#x2F;phishing&quot;<p>CloudFlare: &quot;We R a Reverse proxy&quot;<p>And you don&#x27;t do anything.<p>The problem with you is that you think you&#x27;re some sort of savior of the internet, when all you are is a company providing a service, and you are free to terminate customers who are abusing the service you provide, without trying to pretend you are some sort of government like entity.<p>If you own a restaurant and one of your patrons keeps spitting in other people&#x27;s food, you don&#x27;t tell them that &quot;Oh, but we have <i></i>due process<i></i> come back with a court order and maybe I&#x27;ll ask him to stop.&quot; - you just kick them out.<p>It&#x27;s your network - start taking responsibility for it.