botnet and blacklist

[Gojko]

Hello, my ip just blocked by SPAMHAUSE because my IP (some account) is in botnet network:

Detection Information Summary
Destination IP	remoteIP
Destination port	80
Source IP	MyIP
Source port	44034
C&C name/domain	www.website.com
Protocol	TCP
Time	Fri Apr 24 08:40:24 2020 UTC

then:
Behind a NAT, you should be able to find the infected machine by looking for attempted connections to IP address "remoteIP" or host name "www.website.com" on any port with a network sniffer such as Wireshark. Equivalently, you can examine your DNS server or proxy server logs to references to "remoteIP" or "www.website.com". See Advanced Techniques for more detail on how to use Wireshark - ignore the references to port 25/SMTP traffic - the identifying activity is NOT on port 25.

so what i can do? how to find what account made this? is there any log that i find that website or IP?
is there anything i can do to prevent this?

 

[Usif Nasirov]

Good day!
I had similar problem, maybe it helpfull for find for which user/domen your ip was blocked

Trying to find Cause of CBL blocking

My server's ip has been added to the SpamHaus CBL blacklist. I thought I found the infected client site that is the cause and cleaned it, but I keep getting relisted so I am missing something. SpamHaus have given me excellent information to find the cause, but for the life of me I cannot find...

forums.cpanel.net

 

[Gojko]

Thank you! I setup and now waiting to log.

 

[Usif Nasirov]

Thank you! I setup and now waiting to log.

I will be glad if I helped

 

[cPanelLauren]

Glad to see you were able to get some advice please let us know if you have any further issues or questions.