[Call Graph Shows Supplemental Call Legs]

It appears to be so... https://github.com/EnableSecurity/sipvicious 

I open the PBX with this issue to the world and it only blocks attempts like this for an hour for each attacking IP address.
Are there changes that one would suggest? I have clients that roam around non static IP space. 

[Call Graph Shows Supplemental Call Legs]

Is there a way to tell what registrations, calls or attempts are being handled by Vodia that the System Resources graph would count as a call leg, while the call log wouldn't? 

For example, /reg_callog.htm at the administrator level doesn't show calls between 2 and 3 AM, but the System Resources -> Calls Graph may show a high number of Call Legs. (6-40 for example.)