It’s possible that, when the ISP revokes the public address and assigns a new one, the DNS record isn’t updated immediately and still points to the old address. Then every new request would be sent to the old, invalid address.

I’ve got it set up on my OPNSense firewall

OPNsense has ddclient built in which solves this problem as well.