Been following this topic to be more mindfull about security. (Although I try to block all I can think off).
massenzio I'm thinking that you don't have the "fail2ban" service active, correct?
No fail2ban active, unfortunately.
Now, I'm recovering the data from the drives (which is not a big deal, I had backups somewhere else).
Is there something I can do to see if the date have been just erased and/or copied somewhere else? Maybe disk usage stats? Can I retrieve them from terimnal?