Sign in

Andrew Morris

@andrewmorr.is
1.3K followers 263 following 213 posts

🔳 founder of @greynoise.io. computers, networks, technology enthusiast. big goober.

PostsRepliesMedia
Andrew Morris @andrewmorr.is · 23/01/2026
React bug (CVE-2025-55182) just keeps buggin
040
Andrew Morris @andrewmorr.is · 18/01/2026
wiring my house up with fiber and I'm insanely humbled by my complete lack of even the most basic concepts. LC??? OM3???? multi mode???
2100
Andrew Morris @andrewmorr.is · 18/01/2026
gm. open face sausage egg and cheese sandwich on brioche
250
Andrew Morris @andrewmorr.is · 08/01/2026
All internet traffic from Iran ceased in @greynoise.io one hour ago. Tier 1 dropped off two hours ago.
0148
Andrew Morris @andrewmorr.is · 22/12/2025
unbelieveable
010
Andrew Morris @andrewmorr.is · 13/12/2025
between the ~1,400 networks we've seen exploiting React2Shell (CVE-2025-55182) we've captured about 100 different distinct malware payloads. Lots of vibe coded slop, coin miners, chinese comments, mirai variants, etc. hit us up if you're tracking this and want deets research@greynoise.io
020
Andrew Morris @andrewmorr.is · 10/12/2025
TL;DR a couple hundred IPs suddenly started exploiting Cisco devices today - Entire exploitation cluster is originating from OVH (@ovhcloudus.bsky.social). - Payloads are interesting- attacker is even checking hardware temperatures most likely to ensure they are not honeypots
1185
Andrew Morris @andrewmorr.is · 10/12/2025
Also please be aware if your org runs a lot of Cisco gear we're seeing a very large spike in exploitation against Cisco devices right now.
0102
Andrew Morris @andrewmorr.is · 09/12/2025
viz.greynoise.io/tags/react-s...
000
Andrew Morris @andrewmorr.is · 09/12/2025
Lots of React4Shell in @greynoise.io. Visualization a la @hrbrmstr.dev
163
Andrew Morris @andrewmorr.is · 07/12/2025
React2Shell exploitation frequency in GreyNoise dec 5-dec 6
12611
Andrew Morris @andrewmorr.is · 05/12/2025
React Server CVE-2025-55182 popping off in @greynoise.io right now. Blog from @hrbrmstr.dev up: www.greynoise.io/blog/cve-202...
451
Andrew Morris @andrewmorr.is · 29/11/2025
Shamlessly reposting from elsewhere- you can easily communicate between Linux VMs and guests using VSOCK (man7.org/linux/man-pa...). Here's some silly examples of bidirectional chat btwn host & guest using Socat. Or connecting via SSH to my home router from the VM without TCP/IP. No code required.
2143
Andrew Morris @andrewmorr.is · 20/11/2025
POV you're my new 42U server rack in the garage and I just turned the lights off and saw your lights blinking in the dark for the first time
170
Andrew Morris @andrewmorr.is · 18/11/2025
We've hired Colonel Shawn Smagh to up our @greynoise.io intel reporting game and we've started producing weekly intelligence briefs. This week's is a banger.
082
Andrew Morris @andrewmorr.is · 31/10/2025
ned flanders
2220
Andrew Morris @andrewmorr.is · 31/10/2025
we did a pew pew map btw threat-map.greynoise.io
152
Andrew Morris @andrewmorr.is · 27/10/2025
I've just received word that we're preparing for this years annual @greynoise.io halloween candy bracket. Twix won years 1-2. 100 Grand won last year on a complete fluke. I might write a blog post about how last year's candy bracket undermined my faith in the democratic process.
180
Andrew Morris @andrewmorr.is · 23/10/2025
excuse me for talking to you like a human ass being
010
Andrew Morris @andrewmorr.is · 23/10/2025
when it comes to a head it will have been obvious in hindsight
071
Andrew Morris @andrewmorr.is · 23/10/2025
big week in the morris household. we've started tracking ORBs at @greynoise.io and I'm shitposting again btw (h/t @hrbrmstr.dev)
2131
Andrew Morris @andrewmorr.is · 23/10/2025
DuckDB GraphQL btw duckdb.org/2025/10/22/d...
290
Andrew Morris @andrewmorr.is · 22/10/2025
Played Broken Arrow last night on Steam and its sick
010
Andrew Morris @andrewmorr.is · 31/08/2025
doing some ground floor reporting (celebrating my uncles 80th birthday)
080
Andrew Morris @andrewmorr.is · 21/08/2025
psychic.labs.greynoise.io - Offline, in-memory bitmaps of GreyNoise data. Available now.
081
Andrew Morris @andrewmorr.is · 13/05/2025
011
Andrew Morris @andrewmorr.is · 11/05/2025
anyways I'm putting real ass routers on the GreyNoise grid now and they're getting popped. shoved this one in my apartment onto a sensor in Russia.
0120
Andrew Morris @andrewmorr.is · 09/05/2025
210
Andrew Morris @andrewmorr.is · 06/05/2025
I'm doing a little bit of research on model context protocol (MCP) servers. I ripped back a few thousand repos from github and am doing some automated analysis on their codebases. Here's the language stats on ~2,100 MCP repos. More to come.
240
Andrew Morris @andrewmorr.is · 02/05/2025
did a silly little watercolor
050
Andrew Morris @andrewmorr.is · 29/04/2025
in the past 24 hours traffic out of Spain down ~50%, traffic out of Portugal down 90% in terms of raw signals in @greynoise.io
040
Andrew Morris @andrewmorr.is · 24/04/2025
the answer to this is literally always yes
Remy asking if I want to see something really cool on slack
050
Andrew Morris @andrewmorr.is · 13/04/2025
got the new server runnin
040
Andrew Morris @andrewmorr.is · 08/04/2025
010
Andrew Morris @andrewmorr.is · 04/04/2025
idk why this cracks me up so much. "hey man is it cool if me and 32 of my close buds come over?"
1130
Andrew Morris @andrewmorr.is · 01/04/2025
@lennart.0x58ed.com me taking this pic
020
Andrew Morris @andrewmorr.is · 01/04/2025
turkey pesto 👀
160
Andrew Morris @andrewmorr.is · 30/03/2025
in a bind you can use paper towels as filters in your chemex. nobody will stop you
050
Andrew Morris @andrewmorr.is · 25/03/2025
some light reading
290
Andrew Morris @andrewmorr.is · 18/03/2025
040
Andrew Morris @andrewmorr.is · 18/03/2025
pov i'm making you dinner
490
Andrew Morris @andrewmorr.is · 15/03/2025
this is crazy cuz how was I blasting so fast thru that toll they figured it out in the Philippines???
140
Andrew Morris @andrewmorr.is · 14/03/2025
full moon tonight @lennart.0x58ed.com
140
Andrew Morris @andrewmorr.is · 11/03/2025
I wanted to learn how to write a little Bluesky bot that interacts with local LLMs so I banged out a quick little bot called @imagedescriber.info. You can @ it with an image or as a response to an image in a thread and it will simply describe the images to you as a text response.
273
Andrew Morris @andrewmorr.is · 11/03/2025
test post 2 please ignore
140
Andrew Morris @andrewmorr.is · 11/03/2025
test post please ignore
100
Andrew Morris @andrewmorr.is · 11/03/2025
@imagedescriber.info
400
Andrew Morris @andrewmorr.is · 11/03/2025
@imagedescriber.info
440
Andrew Morris @andrewmorr.is · 09/03/2025
080
Andrew Morris @andrewmorr.is · 08/03/2025
on my brioche shit rn fr
1140