The address in an incoming DCC CHAT/SEND is chosen by the remote IRC user, and ZNC is the side that connects to it, relaying traffic to whoever connects to the bounce listener. Refuse requests that point at 0/8, 127/8, 169.254/16, 224/3 or values above 32 bits (which CUtils::GetIP would otherwise mask down to one of those).