In the sshd logging today: sshd[26961]: Invalid user <!-- from 103.9.88.249 But the logging is parsed via software that doesn't trust input either, so the rest is in the report too. Including more attempts from that IPv4 address.
sshd[26961]: Invalid user <!-- from 103.9.88.249