So for an idea of just how much spam there was, for a moment fedidb was showing user-growth during the attack of 40 million accounts:

Looks like most of that can be attributed to a test server that had ridiculously inflated user counts.