Over the last 30 days, detections for the 3 countries hosting Botnet C&C's are:

#1 -> 448
#2 -> 342
#3 -> 142

Meanwhile on @abuse_ch's URLHaus the 3 countries with the most active malware distribution sites:

#1 -> 13,085
#2 -> 12,997
#3 - > 9,085

Spamhaus reputation statistics:
https://www.spamhaus.org/reputation-statistics/countries/botnet/

Malware Digest | URLHaus:
https://www.spamhaus.org/malware-digest/#urlhaus