Validate resolved dial IPs in the channel monitor HTTP transport so DNS rebinding cannot bypass SSRF checks.
Add default probe prompts and SSRF validation for channel monitor targets, with focused tests for blocked internal addresses.