{
"event": "UserPromptSubmit",
"prompt": "root@kkprod ~ # journalctl -u ssh -n 10\nJan 03 11:03:41 kkprod sshd-session[2544941]: Accepted publickey for root from 148.251.182.181 port 6494 ssh2: ED25519 SHA256:BJrbQ9KWcL0p+JZ05U1nlnsQW8Q>\nJan 03 11:03:41 kkprod sshd-session[2544941]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)\nJan 03 11:03:41 kkprod sshd-session[2544941]: pam_unix(sshd:session): session closed for user root\nJan 03 11:03:41 kkprod sshd-session[2544954]: Accepted publickey for root from 148.251.182.181 port 6498 ssh2: ED25519 SHA256:BJrbQ9KWcL0p+JZ05U1nlnsQW8Q>\nJan 03 11:03:41 kkprod sshd-session[2544954]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)\nJan 03 11:03:41 kkprod sshd-session[2544954]: pam_unix(sshd:session): session closed for user root\nJan 03 11:36:16 kkprod sshd-session[2565157]: Accepted publickey for root from 145.224.72.245 port 62676 ssh2: RSA SHA256:5h9Zmda1qCaV5MP3Yp2041wUR2vP2Ek>\nJan 03 11:36:16 kkprod sshd-session[2565157]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)\nJan 03 11:37:39 kkprod sshd-session[2566118]: Accepted publickey for root from 145.224.72.245 port 53989 ssh2: RSA SHA256:5h9Zmda1qCaV5MP3Yp2041wUR2vP2Ek>\nJan 03 11:37:39 kkprod sshd-session[2566118]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)"
}