They're the direct customer of Hurricane Electric, and our server provider in that region of the US.

We have our ASN and IPs announced on their network.

Both companies are run by friends of Kiwifarms and also provide services to Kiwifarms. That's why abuse complaints to the hosting provider are pointless in this situation and why the victims went upstream.

They also don't seem to have an actual customer base beyond this 1 customer.

While it's certainly a comical thought to imagine a business opening their doors and waiting years to onboard a single customer, that an upstream swiftly cancels on their behalf, it's nothing more than a far-fetched story that you're telling. Do you genuinely believe that both of these businesses exist to support a single customer?

Abuse complaints have to be valid. Submitting opinion pieces to our inbox is good reading, but beyond that, relatively pointless without links to actual unlawful content. I can't speak on behalf of Crunchbits since we simply lease hardware from them, but they likely subscribe to the same policy that most service providers do.

It would be better to call a lawyer or the police. There's no AUP or TOS for the entire internet (aside from stuff that endangers the network itself), and I'm strongly opposed to any efforts to create one.