trying to understand my firewall rules, i found some strange events in the output queue:

83.219.169.xx is my Public IP
89.22.96… is IP-Adresse of Mail-Server
192.168.123.134 is internal IP from Girlfriends Cell Phone (using K9 e-mail app)
it is in the output queue. so as i understand it, it is coming direktly from the Router?
Girlfriend left home some minutes ago.. so she was not in the WLAN anymore..
is this “normal” ??
scrnat rule is:
/ip firewall nat
add action=masquerade chain=srcnat ipsec-policy=out,none out-interface-list=WAN src-address=192.168.123.0/24
firewall rule generating the log:
add action=accept chain=output comment=“scrNated OUTPUT?? " connection-nat-state=srcnat log=yes log-prefix=”?"