I set up wordops for the first time recently, and after about a day I found that I was not able to connect over ssh from my home ISP. Finally tried getting in from a different IP address, and I could get in. Later I discovered that in the ufw.log file it was showing my ISP ip had gotten blocked.
Not sure how to read this (log line below) but I see that the destination port is 22222 which is the web UI for wordops. And I do remember opening that up and logging into it (before I got blocked). I had left it open in my browser for a day or so. My suspicion is that the web app may have some javascript refresh code that made frequent enough requests to the server to trigger the "LIMIT BLOCK" of ufw.... Does this sound plausible? And if so, is there any solution? I've since removed that LIMIT rule on ufw, but as a default out of the box setup with ufw turned on, this could possibly happen to others...unless I did something wrong.
May 1 01:46:02 instance-20220429-1505 kernel: [10514.249760] [UFW LIMIT BLOCK] IN=ens3 OUT= MAC=02:00:17:15:94:b5:00:00:17:c5:14:a2:08:00 SRC=my home ip here DST=10.0.0.10 LEN=48 TOS=0x00 PREC=0x00 TTL=56 ID=0 DF PROTO=TCP SPT=55216 DPT=22222 WINDOW=65535 RES=0x00 SYN URGP=0