"Who's knocking on my server?" - we read the logs and catch hackers by the hand

We analyze access logs in detail: what brute force, SQL injection and vulnerability scanning look like in real logs, what commands will help you find an attack in a minute and what to do when you find a suspicious one.