Could be also he faked Ottoman.. Both the IP's belong to same subnet.. Ottoman also changed his GUID recently. Either Ottoman is faking or that another guy.. At this point I can't tell who is who because both IP/GUID belong to same Germany subnet with first 2 octets same.

The best thing you can do is catch him on server and !finger him. That would make it clear who is who.