Profile: Dan O'Connor
Cert PL took over a bot net involved with fake AV and published the results of what they found. This includes connection counts and locations.
I have to admit that I am surprised that the counts of the this network. Check out page 15, 16 and 18.