it can not be a spam attack because the main characteristic of a spam attack is "constant" injection of transactions into the mempool and so far this does not look like a spam attack to me:



for comparison, the following is how a spam attack looks like (the picture is from Jan 2017)

pic ref: https://bitcointalk.org/index.php?topic=1776143.0