Ah, those people who first register a catchy domain before reporting security issues... Today: https://sshhole.com

They mention "OpenWRT", but that seems incorrect for multiple reasons. a.) OpenWRT normally uses dropbear, not opensshd b.) at least on the OpenWRT box I checked, root does not have "*" in /etc/passwd but "x" and is the only account which has a login shell.

But well, as I said... seems fitting for such attention seeking people. "*sshole", well...