Probably it was not scanning because the connection was encrypted (https traffic) - inside the nodes all the traffic is encrypted while outside it depends…