Blocking unwanted SIP traffic manually is a reactive procedure, in the absence of smart tools, being pro-active is nearly impossible, it is common if you’re only reacting to a SIP attack that the damage of different types is already done.

If you're interested in automatically blocking unwanted SIP traffic detected by multiple honeypots, check out apiban.org or continue reading my full blog post that includes a tutorial here: https://blog.telecomsxchange.com/block-sip-attack/