Security breach on extension

I would suggest that the default admin/admin login is your problem, you don’t mention the phone in question or your network configuration at all ends, if the router at the “private residence” forwards udp/5060 connections to the phone, then that is where the problem starts and then gets worse.