A source in the ISP community shared a copy of a Web server installation that was used as a controller for the Grum botnet. That controller contained several years worth of data on the botnets operations. At the time of its demise in mid-July 2012, it was responsible for sending roughly one in every six spams delivered worldwide, and capable of blasting 18 billion spam emails per day. Most of the junk mail that Grum sent was for ads promoting rogue Internet pharmacies and replica watches.”]
Source: https://krebsonsecurity.com/2012/08/inside-the-grum-botnet/