{"13.59.96.59":{"first_trapped":1776320922,"count":1,"reason":"Header Anomaly: Chrome UA but missing sec-ch-ua AND sec-fetch-* headers (fake Chrome \u2013 likely scanner)","last_seen":1776320922},"3.145.20.249":{"first_trapped":1776320922,"count":1,"reason":"Header Anomaly: Chrome UA but missing sec-ch-ua AND sec-fetch-* headers (fake Chrome \u2013 likely scanner)","last_seen":1776320922},"18.226.104.242":{"first_trapped":1776320922,"count":1,"reason":"Header Anomaly: Chrome UA but missing sec-ch-ua AND sec-fetch-* headers (fake Chrome \u2013 likely scanner)","last_seen":1776320922},"34.58.71.228":{"first_trapped":1776320924,"count":1,"reason":"Browser UA from GCP hosting (228.71.58.34.bc.googleusercontent.com) \u2013 likely scanner\/bot","last_seen":1776320924},"54.70.53.60":{"first_trapped":1776321136,"count":1,"reason":"TLS Mismatch: Chrome\/143 UA but missing Sec-CH-UA header (fake Chrome \u2013 scanner probe)","last_seen":1776321136},"184.188.72.59":{"first_trapped":1776322609,"count":1,"reason":"Residential proxy burst from \/184.188.72.0\/24: 6 distinct IPs in 60s","last_seen":1776322609},"184.188.72.231":{"first_trapped":1776322613,"count":1,"reason":"Residential proxy burst from \/184.188.72.0\/24: 7 distinct IPs in 60s","last_seen":1776322613}}