You already ruled out Tailscale and the internal network and potentially the route taken to each your router.
Does your router run any services that perform IDS/IPS maybe? Any sort of packet filtering on the external interface?