{"cmd":"grep -E 'sshd|sudo' /var/log/auth.log | tail -n 13","output":"Jan 26 04:44:22 host sshd[2847]: Failed password for deploy from 203.0.113.125 port 18714 ssh2\nJan 26 04:44:33 host sshd[9508]: Failed password for deploy from 203.0.113.125 port 48748 ssh2\nJan 26 04:44:44 host sshd[1339]: Failed password for deploy from 203.0.113.125 port 10716 ssh2\nJan 26 04:44:55 host sshd[7722]: Failed password for deploy from 203.0.113.125 port 57140 ssh2\nJan 26 04:45:06 host sshd[4608]: Failed password for deploy from 203.0.113.125 port 44236 ssh2\nJan 26 04:45:17 host sshd[3320]: Failed password for deploy from 203.0.113.125 port 24433 ssh2\nJan 26 04:45:28 host sshd[9156]: Failed password for deploy from 203.0.113.125 port 3049 ssh2\nJan 26 04:45:39 host sshd[5003]: Failed password for deploy from 203.0.113.125 port 38876 ssh2\nJan 26 04:45:50 host sshd[8056]: Failed password for deploy from 203.0.113.125 port 24578 ssh2\nJan 26 04:46:01 host sshd[4380]: Failed password for deploy from 203.0.113.125 port 49806 ssh2\nJan 26 04:46:12 host sshd[2462]: Failed password for deploy from 203.0.113.125 port 13727 ssh2\nJan 26 04:46:34 host sshd[7189]: Accepted password for deploy from 203.0.113.125 port 42884 ssh2\nJan 26 04:46:45 host sudo:   deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/usr/bin/id\n"}