I also have seen a high amount of (re-)connections from today (July 27th) which is also weird. You can see them on https://atlas.ripe.net/probes/1000023/#!tab-network

I also got a journalctl snippet available on https://paste.debian.net/plainh/cacd78f8

Regards,

Ilteris