None of your posted log entries feature a TCP SYN flag, so there is no "initiation" of a connection anywhere.

Looks like a filter misconfiguration to me, blocking legit traffic.