Large ISPs in many countries are already required to log connection metadata. This could trivially be used to verify botnet activity, even identity CnC nodes.

I'm sure there is still scope for abuse, but letting ISPs ignore abuse reports isn't working out well for the rest of the internet either.

But yes, maybe attaching some real personal perjury liability —unlike the watered down DMCA abuse liability— might be a good idea. Good network admins know what abuse looks like and have logs to corroborate.