How to use WIRESHARE to get scammer info?

Hello-

Thanks for reading my question. How do you go about using wireshark to get a VOIP IP address?

Thanks!
Bishop

@thebishop#54907 As 1888 says, the scammer’s VOIP account connects only to a VOIP server, so you’ll not see this traffic on your VM, so you’ll never see their VOIP traffic on wireshark. Your best chance of seeing a scammer’s IP address is if they happen to pick remote access software which lets a scammer make a direct connection to his victim. Examples are TeamViewer, LogMeInRescue and Bomgar. Apps like FastSupport/GoToAssist, Supremo & UltraShare show server traffic only; not the scammer’s IP address.

Correct, Comrades! However … you can traptrace their VoIP calls if you are by chance running your own PBX/PBXa system, Set you incoming filters for the following:

  • 1. Log all SIP/VoIP assignments.
  • 2. Capture packet loss from SIP/QOS in/outbound to client.
  • 3. Turn OFF defragment SIP/VoIP transmission.
  • 4. Turn OFF allow re-route.
  • Then review your logs, on about 90% you'll trap/trace their IP (C2C Connection)

    Thanks for the all the good info!

    I think I phrased the question wrong, Im looking to find the VOIP server IP address.

    Thoughts?

    @Garris_Tobin#54936

    Can you email me at vlyazz9 (at) gmail.com ?