The request itself was malformed (Bad Request) -- a protocol/syntax issue, not a policy rejection.
In the status line of a SIP response, often with Reason and Warning headers that say more.
Got a trace with SIP 400 Bad Request? Drop it in the analyzer: it finds the step that really failed first, which node sent the code and what to ask the other side. Captures, test-system PDFs and vendor exports. 5 free analyses a month, no sign-up.
Analyze a trace free