Almost 2 years ago I took my blocklist of SIP attacker IPs offline because I couldn't get it integrated easily into Ghost. I finally had time to work on getting back up. The blocklist is now on Github: https://github.com/sgofferj/sipblocklist.
I also streamlined the creation process a little bit. For more information, please read the README in the Github repo.