A method for defeating media-coordinated attacks on emergency call networks can include receiving, by a first ESRP element, a session initiation request with a session description Protocol (SDP) body wherein the session initiation request deviates from a preconfigured media threshold k from a caller. The sending of an alert notification to a second ESRP element and/or other ESRP elements is provided in response to a logging of the session initiation request which deviates from a preconfigured media threshold k in a set of requests. If there is a transcoding impact in the routing element that will handle the call, alert notifications which have been received using the subscribed/notify mechanism for a potential media-coordinated attacks form other ESRP elements in the network can be gathered and analyzed for processing to defeat a malicious attack on the network.