Yes, there was a bot exposing people's IP addresses. When connecting to Nostr without using Tor/Orbot (which is now standard on Amethyst) or a VPN, relays have access to your IP address. If I recall correctly, the bot used an image in direct messages that, when viewed, revealed the user's IP address - which it then publicly posted on Nostr.