A mysterious attacker is scanning the Internet for EOS blockchain nodes that are accidentally exposing private keys through an API misconfiguration. The scans started today, according to threat intelligence firm GreyNoise, and all the malicious activity appears to be originating from the IP address: 185.169.231.209. If you run an @EOS_io node, be aware of an actor at 185[.]169[.]231[.]209 sweeping
![Misconfigured EOS Blockchain Nodes Under Attack](https://cdn-ak-scissors.b.st-hatena.com/image/square/3f2f94c1c33d061eb0c86cdbb9ef73f124cd12bc/height=288;version=1;width=512/https%3A%2F%2Fwww.bleepstatic.com%2Fcontent%2Fposts%2F2018%2F05%2F29%2FEOS-logo.jpg)