I suspect that this is probably cl0ak. The same person who has been spreading bad links in profiles lately with the grabify.link service, announcing user's IP's in chat with his bot (users that had clicked his grabify links) and the trojaned teamspeak server.