I had a scammer connect to my VM and I used wireshark to find some info.
Phone: 1-844-764-4487
Website: http://warning-alert.website/firiedgex/99
213.227.184.135
AS: 42473 (ANEXIA Internetdienstleistungs GmbH)
City: New Delhi
Country: India
43.252.26.36
AS: 58640 (NEXTRA TELESERVICES PVT. LTD.)
City: Gurgaon
Country: India
Not sure about what to do with this info other than post it.
These were the indian IP's that were connected to my VM.