This is what's on 190.97.165.197:3333
http://pastebin.com/VRqgpDeyIt autoupdates and adds new entries every so often. Seem to me that it's some sort of config that is redirecting the miners.
would this be a compromise on the server or on the mining pc?