But you know, this is pretty much the norm nowadays: every fucking website, every pixel and cookie is tracking you. This bot only makes visible, but it a sad state of the internet. :(
Remember #nostr is extrimly public, and it's safe to assume that other places are too, BTW: you favorite news website, some useful forum, popular social network.
At the minimum I would review the list of relays that you are connecting. By connecting to a relay you are implicitly trusting the admins that they don't use your IPs.