{"cmd":"grep -E 'sshd|sudo' /var/log/auth.log | tail -n 14","output":"Jan 26 14:45:59 host sshd[5874]: Failed password for admin from 192.0.2.121 port 38139 ssh2\nJan 26 14:46:10 host sshd[5629]: Failed password for admin from 192.0.2.121 port 44187 ssh2\nJan 26 14:46:21 host sshd[7545]: Failed password for admin from 192.0.2.121 port 13988 ssh2\nJan 26 14:46:32 host sshd[6677]: Failed password for admin from 192.0.2.121 port 30912 ssh2\nJan 26 14:46:43 host sshd[7191]: Failed password for admin from 192.0.2.121 port 34091 ssh2\nJan 26 14:46:54 host sshd[7818]: Failed password for admin from 192.0.2.121 port 47184 ssh2\nJan 26 14:47:05 host sshd[7792]: Failed password for admin from 192.0.2.121 port 9232 ssh2\nJan 26 14:47:16 host sshd[2158]: Failed password for admin from 192.0.2.121 port 16600 ssh2\nJan 26 14:47:27 host sshd[9959]: Failed password for admin from 192.0.2.121 port 62258 ssh2\nJan 26 14:47:38 host sshd[1188]: Failed password for admin from 192.0.2.121 port 54230 ssh2\nJan 26 14:47:49 host sshd[6330]: Failed password for admin from 192.0.2.121 port 60789 ssh2\nJan 26 14:48:00 host sshd[6872]: Failed password for admin from 192.0.2.121 port 5805 ssh2\nJan 26 14:48:22 host sshd[5214]: Accepted password for admin from 192.0.2.121 port 37229 ssh2\nJan 26 14:48:33 host sudo:   admin : TTY=pts/0 ; PWD=/home/admin ; USER=root ; COMMAND=/usr/bin/id\n"}