Our node is offline currently due to an exploit attack. Our network administrator shows heavy traffic out on port 2222 among others. We don't use this port.

So reload the new image.

For future reloads, how best to reconstruct the local changes done to the original image to carry over the custom config files?

73,

Duane KA1LM