PURPOSE: A real time monitoring method and a system thereof are provided to filter Internet calls which belong to a blacklist. CONSTITUTION: A real time monitoring system receives an SIP message from an Internet call traffic based on an SIP(Session Initiation Protocol)(S10). The real time monitoring system obtains international call related information from the SIP message(S20). The real time monitoring system generates an SFCI(Suspicious Fraud Call Index) index(S30). The real time monitoring system finds a suspicious user using the SFCI index(S40).