Apr 13 23:39:08 ip-A-A-A-A sshd[2359]: debug1: Forked child 2366.
Apr 13 23:39:08 ip-A-A-A-A sshd[2366]: debug1: Set /proc/self/oom_score_adj to 0
Apr 13 23:39:08 ip-A-A-A-A sshd[2366]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8
Apr 13 23:39:08 ip-A-A-A-A sshd[2366]: debug1: inetd sockets after dupping: 3, 3
Apr 13 23:39:08 ip-A-A-A-A sshd[2366]: Connection from X.X.X.X port YYYY on A.A.A.A port 22
Apr 13 23:39:08 ip-A-A-A-A sshd[2366]: debug1: Client protocol version 2.0; client software version OpenSSH_7.4
Apr 13 23:39:08 ip-A-A-A-A sshd[2366]: debug1: match: OpenSSH_7.4 pat OpenSSH* compat 0x04000000
Apr 13 23:39:08 ip-A-A-A-A sshd[2366]: debug1: Enabling compatibility mode for protocol 2.0
Apr 13 23:39:08 ip-A-A-A-A sshd[2366]: debug1: Local version string SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.4
Apr 13 23:39:08 ip-A-A-A-A sshd[2366]: debug1: permanently_set_uid: 110/65534 [preauth]
Apr 13 23:39:08 ip-A-A-A-A sshd[2366]: debug1: list_hostkey_types: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
Apr 13 23:39:08 ip-A-A-A-A sshd[2366]: debug1: SSH2_MSG_KEXINIT sent [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: SSH2_MSG_KEXINIT received [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: kex: algorithm: curve25519-sha256@libssh.org [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: kex: host key algorithm: ecdsa-sha2-nistp256 [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: rekey after 134217728 blocks [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: SSH2_MSG_NEWKEYS sent [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: expecting SSH2_MSG_NEWKEYS [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: rekey after 134217728 blocks [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: SSH2_MSG_NEWKEYS received [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: KEX done [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: userauth-request for user user@user.com service ssh-connection method none [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: attempt 0 failures 0 [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: Invalid user user@user.com from X.X.X.X
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: input_userauth_request: invalid user user@user.com [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: PAM: initializing for "user@user.com"
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: PAM: setting PAM_RHOST to "X.X.X.X"
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: PAM: setting PAM_TTY to "ssh"
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: userauth-request for user user@user.com service ssh-connection method publickey [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: attempt 1 failures 0 [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: Connection closed by X.X.X.X port YYYY [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: do_cleanup [preauth]
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: monitor_read_log: child log fd closed
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: do_cleanup
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: PAM: cleanup
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: Killing privsep child 2367
Apr 13 23:39:09 ip-A-A-A-A sshd[2366]: debug1: audit_event: unhandled event 12