By default the SipVicious scanner uses the ua : “friendly-scanner”. To block this ua, you can have iptables search the packet for that text.
add the following line to /etc/sysconfig/iptables
-A INPUT -p udp -m udp --dport 5060 -m string --string “friendly-scanner” --algo bm --to 500 -j DROP