Log detective

The shell has realistic logs seeded in /var/log. Investigate:

1. grep ERROR /var/log/syslog — any errors on this box?
2. grep -r flooding /var/log — find the SYN flood warning
3. cat /var/log/nginx.log | grep 403 — who's being denied?
4. awk '{print $1}' /var/log/nginx.log | sort | uniq — distinct client IPs
5. journalctl -u nginx — the service's own journal
6. Save evidence: grep 403 /var/log/nginx.log > ~/evidence.txt && cat ~/evidence.txt