This is what they wrote:
Your sites wee intermittently down due to your local IP being blocked at the server.
The IP was temporarily blocked due to large number of connection to server. Please note temporary blocks are removed automatically after few minutes. This is the reason why the sites were going up and down.
Nov 24 04:06:02 green lfd: Incoming IP 220.127.116.11 temporary block removed
Nov 24 04:06:02 green lfd: Outgoing IP 18.104.22.168 temporary block removed
Nov 24 04:18:10 green lfd: (CT) IP 22.214.171.124 (GR/Greece/188.4.......dyn.forthnet.gr) found to have 226 connections - *Blocked in csf* for 1800 secs [CT_LIMIT]
Only solution for your issue is need to limit your connections.
We can not increase the limit of csf. because its a sheared server.
You need to ask for the exact reason of blocking, or the logs, as suggested. If you're monitoring the server from your IP this could be a likely cause. I'm not aware of a feature in CSF that would allow what you suggest. However, it seems irrelevant in this case.
According to http://www.configserver.com/cp/csfdemo/config.html
there are a good number of configuration parameters.
Of course, I understand that if the techs change something that it affects all of the domains.
At the same time though I do not see anything that would indicate that being blocked by csf's would happen because of a cms otherwise joomla users would be extinct.
So logic tells me that this must have to do with network utilities that scan the server.
I also happen to use a free website monitoring due to the outages. I would assume that the csf would only block the ip of the offender.
Could this affect blocking the ip of all the domains?