fix(permissions): check resolved IP against import deny list (#36486)