Trying to make me skip the rest of the security report / 2018-02-02

In the sshd logging today:

sshd[26961]: Invalid user <!-- from 103.9.88.249

But the logging is parsed via software that doesn't trust input either, so the rest is in the report too. Including more attempts from that IPv4 address.