212.12.30.181 has a threat confidence score of 15%. This IP address from Russia (AS8675, Rostelecom) has been observed in 28 honeypot sessions targeting SMB protocols. First observed on January 21, 2026, most recently active March 31, 2026.