I’m using virtualbox for a scambait machine and i use protonvpn. I tried finding a scammers ip with Wireshark but i can’t find it. I have GeoIP but no luck. Can i get tips on how can i get the ip address?
i had the same problem but I switched to VMware and then Wireshark work and got the ip of the scammers.
What are you doing to interact with the scammers to grab their IP with Wireshark?
If scammer connects via Anydesk, GeoIP will show country,city.
Make sure you capture the right ethernet (wifi or ethernet interface) The correct interface will have wave like lines
Thanks
Once successful, use statistics > endpoints to get the destination