@toxicfusion
This happens when there are massive attacks and the asterisk log shows that the attacks come from your own server, but, I think is a trick that attacker use to avoid being banned.
You may use the sngrep tool to check if one of the SIP scanners is attacking to your server.
