CBL Blocking - False positive?

[Anag]

Hello,

I have a CBL blocking and we did not find any problem on server.

This IP address is infected with, or is NATting for a machine infected with the ZeuS trojan, also known as "Zbot" and "WSNPoem".

We are thinking about false positive...


Do you know how we could contact CBL to ask about false positive ?

 

[nixuser]

For lookup/remove use https://www.abuseat.org/lookup.cgi

 

[Anag]

I already delist since 3 days but now, i can not do more.

Cbl ask me to trace and track the account user infected but i can t do this type of task...

How can i do to check ip through logs ?

 

[cPanelLauren]

Hello @Anag

I'd suggest performing a malware audit on the server, we offer ClamAV but there are also services such as Immunify and Linux Malware Detect which can be used effectively. If you're unable to find the source of the issue, I'd suggest contacting your provider for further assistance and if they're unable to assist you, you may want to enlist the assistance of a system administrator. If you don't have one you might find one here: System Administration Services | cPanel Forums

Thanks!