This is what's on 190.97.165.197:3333
http://pastebin.com/VRqgpDeyIt autoupdates and adds new entries every so often. Seem to me that it's some sort of config that is redirecting the miners.
would this be a compromise on the server or on the mining pc?
I would say it's not on the mining pc ... I run both bamt and win7 mining rigs, and all switched at the same time.