From: "Seth David Schoen" <schoen@loyalty.org>
To: "Joe Greco" <jgreco@ns.sol.net>
Cc: "North American Network Operators Group" <nanog@nanog.org>
Sent: Thursday, February 24, 2022 7:59:08 PM
Subject: Re: Russian aligned ASNs?

I also imagine (without data) that most DoS attacks continue to be
performed by botnets, using other people's connections, rather than
directly by their ultimate perpetrators.  So, the most effective and
meaningful mitigation would be trying to clean up bots, and prevent
ongoing bot infections, rather than cutting off suspected or actual
perpetrators.

I realize that's much easier said than done!