Spoofed Brute force

[prozak]

It appears there are more incidents of this type of attack.

SIP attack with fake header

This is the thread I was thinking about, although it seems to have petered out before it was established why the security log wasn’t working for its OP:

Anyone whos facing the same attacks, use sngrep bin so you can easily analyze sip debug logs and find the attackers source ip.