A system that incorporates teachings of the present disclosure may include, for example, a server having a controller to obtain billing data associated with a plurality of calls over a Voice Over Internet Protocol network, determine special service calls being made based on the billing data, monitor for the special service calls being associated with at least one of one calling number or one network node, and determine an undesired condition based at least in part on the special service calls being made from the one calling number or through the one network node exceeding a threshold. Other embodiments are disclosed.