212.81.212.18 has a threat confidence score of 18%. This IP address from Spain (AS3262, SAREnet, S.A.) has been observed in 26 honeypot sessions targeting SMB protocols. First observed on February 3, 2026, most recently active March 22, 2026.