Many thanks!Yes, "/log print" is one way, [....]
[...] other than convincing ISP to give you new static address that's not blacklisted.
One of the hypotheses was that the router was compromised and that there was software installed that could send mail....because there's no smtp server on router
Disable dhcp-clients "user-peer-dns" function:
/ip dhcp-client set 0 use-peer-dns=no