Agent posts an empty beacon over a tcp4-forced connection every 5 minutes (plus once at startup); panel files the observed source as SeenIPv4 only when it is a public IPv4 literal, never touching the reported telemetry address, so 1:1 NAT nodes stop falling back to their private address in share links.