This is a cool idea.
So if understand correctly, per phone (or one phone per public IP address) you need to have a second registration line on port 8650 to your FusionPBX box?
Bang for buck, blacklisting regions has been my best way of preventing SSH/SIP/HTTP attacks, but this layered on top...