{"cmd":"grep -E 'sshd|sudo' /var/log/auth.log | tail -n 14","output":"Jan 26 05:55:56 host sshd[5240]: Failed password for user from 198.51.100.1 port 20908 ssh2\nJan 26 05:56:07 host sshd[4609]: Failed password for user from 198.51.100.1 port 20446 ssh2\nJan 26 05:56:18 host sshd[5399]: Failed password for user from 198.51.100.1 port 37209 ssh2\nJan 26 05:56:29 host sshd[2951]: Failed password for user from 198.51.100.1 port 12237 ssh2\nJan 26 05:56:40 host sshd[4668]: Failed password for user from 198.51.100.1 port 4013 ssh2\nJan 26 05:56:51 host sshd[9741]: Failed password for user from 198.51.100.1 port 16635 ssh2\nJan 26 05:57:02 host sshd[5781]: Failed password for user from 198.51.100.1 port 3585 ssh2\nJan 26 05:57:13 host sshd[3427]: Failed password for user from 198.51.100.1 port 62761 ssh2\nJan 26 05:57:24 host sshd[5550]: Failed password for user from 198.51.100.1 port 61792 ssh2\nJan 26 05:57:35 host sshd[3178]: Failed password for user from 198.51.100.1 port 18747 ssh2\nJan 26 05:57:46 host sshd[1844]: Failed password for user from 198.51.100.1 port 43125 ssh2\nJan 26 05:57:57 host sshd[5079]: Failed password for user from 198.51.100.1 port 54987 ssh2\nJan 26 05:58:19 host sshd[4440]: Accepted password for user from 198.51.100.1 port 36059 ssh2\nJan 26 05:58:30 host sudo:   user : TTY=pts/0 ; PWD=/home/user ; USER=root ; COMMAND=/usr/bin/id\n"}