[asterisk-users] Failed to authenticate user 1000<sip:1000 at MY_OWN_IP_ADDRESS>; tag=03f82bb9

[Gareth Blades]

On 02/10/13 16:13, gincantalupo wrote:
> Hi Garet,
>
> ok but since the messages contain my own public IP with this method 
> I'm banning my public IP not the real attacker IP. Am I wrong?
>
> Giorgio

No the asterisk dialplan entry is pulling the IP address out of the SIP 
Contact: header which in the attacks we have seen always seems to be the 
correct IP address.