Unfortunately this is definitely looking like a timestamp attack. The sum nethash of all the pools (the real miners) is under 2Mh/s while we're seeing spikes northwards of 27Mh/s in the network.  That's an extremely unhealthy ratio. Some malicious entity is virtually stealing most of the blocks.