diff --git a/proxmox-monitor.prose.md b/proxmox-monitor.prose.md
index 9c03e9d..80ecd31 100644
--- a/proxmox-monitor.prose.md
+++ b/proxmox-monitor.prose.md
@@ -113,18 +113,18 @@ curl -s -o /dev/null -w '%{http_code}' http://192.168.68.116:9090/-/healthy
 curl -s -o /dev/null -w '%{http_code}' http://192.168.68.116:3001/api/health
 # Expected: 200 (Grafana is up and healthy)
 
-# Docker Stats exporter (bound to 0.0.0.0:9324 on .116)
-curl -s -o /dev/null -w '%{http_code}' http://192.168.68.116:9324/metrics
+# Docker Stats exporter (bound to 127.0.0.1:9324 on .116 — must probe from .116 localhost)
+ssh root@192.168.68.116 "curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:9324/metrics"
 # Expected: 200 (docker-stats-exporter is up and responding)
 
-# PVE exporter (bound to 0.0.0.0:9221 on .116)
-curl -s -o /dev/null -w '%{http_code}' http://192.168.68.116:9221/metrics
+# PVE exporter (bound to 127.0.0.1:9221 on .116 — must probe from .116 localhost)
+ssh root@192.168.68.116 "curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:9221/metrics"
 # Expected: 200 (pve-exporter is up and responding)
 ```
 
 **Report format**: Summarize actual results from each probe. If any probe returns non-200, flag as alert.
 
-**Note**: All exporters are bound to 0.0.0.0 (not 127.0.0.1) so they are reachable from the LAN.
+**Note**: Docker Stats and PVE Exporter are bound to 127.0.0.1 (localhost-only) so they must be probed from .116 via SSH. Prometheus and Grafana are bound to 0.0.0.0 so they can be probed from the LAN.
 
 ### restart-exporter
 `cd /opt/monitoring && docker compose restart pve-exporter docker-stats`