here's the official state department's statement: https://www.state.gov/releases/office-of-the-spokesperson/20...
IANAL but the common understanding of the situation would be: You can't as an ISP prevent malicious actors from using your service, but you do can assist the government - in this case the German - to hand over the data to help assist law enforcement. If state-department's claims are true, did noblogs.org do so?
The digital markets act makes liability pretty clear. Basically a takedown notice law.