I want to know if I can block service calls from Internet to a VIP using irules

This depends entirely on how you want to block the calls. As a layer 4-7 proxy you can use any of the following as conditions (and in various combinations):

• source address/port
• destination address/port
• cipher strength (client/server)
• request context (request, header, cookie, payload, method, etc.)
• response context (response, header, cookie, payload, status, etc.)

Can you be more specific about what the service calls are, how they're different than other traffic, and the conditions that define them?