[asterisk-users] how do I run a command on "Failed to authenticate" ?

[sean darcy]

16.13.0, pjsip

I'd like to get an alert if a call fails to authenticate:

if "Failed to authenticate" then
    mail someone the source ip
endif

As I look at ami or ari, they deal with calls in channels. Is there a 
way to get failed invites or registers ?

sean