Help read this call log to determine how they are making fraudulent calls

Can someone please help me read the following log to determine how this caller is able to make outbound calls through our IVR? I thought I would post it while I am reviewing the log myself and maybe someone could help me sooner before I can figure it out. Thanks all!

[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [0016765541256@from-internal-xfer:1] Macro(“Local/0016765541256@from-internal-xfer-000213b1;2”, “user-callerid,LIMIT,EXTERNAL,”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:1] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “TOUCH_MONITOR=1493993017.296999”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:2] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “AMPUSER=31433254059”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:3] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?report”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:4] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “1?Set(REALCALLERIDNUM=31433254059)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:5] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “AMPUSER=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:6] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?limit”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:7] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “AMPUSERCIDNAME=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:8] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “1?report”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (macro-user-callerid,s,16)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:16] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “1?continue”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (macro-user-callerid,s,30)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:30] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “CALLERID(number)=31433254059”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:31] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “CALLERID(name)=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:32] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “CDR(cnum)=31433254059”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:33] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “CDR(cnam)=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-user-callerid:34] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “CHANNEL(language)=en”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [0016765541256@from-internal-xfer:2] Gosub(“Local/0016765541256@from-internal-xfer-000213b1;2”, “sub-record-check,s,1(out,0016765541256,dontcare)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@sub-record-check:1] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “11?initialized”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (sub-record-check,s,10)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@sub-record-check:10] NoOp(“Local/0016765541256@from-internal-xfer-000213b1;2”, “Recordings initialized”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@sub-record-check:11] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?Set(ARG3=dontcare)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@sub-record-check:12] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “REC_POLICY_MODE_SAVE=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@sub-record-check:13] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?Set(REC_STATUS=NO)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@sub-record-check:14] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “3?checkaction”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (sub-record-check,s,17)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@sub-record-check:17] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “1?sub-record-check,out,1”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (sub-record-check,out,1)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [out@sub-record-check:1] NoOp(“Local/0016765541256@from-internal-xfer-000213b1;2”, “Outbound Recording Check from 31433254059 to 0016765541256”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [out@sub-record-check:2] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “RECMODE=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [out@sub-record-check:3] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “1?Goto(routewins)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (sub-record-check,out,7)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [out@sub-record-check:7] Gosub(“Local/0016765541256@from-internal-xfer-000213b1;2”, “recordcheck,1(dontcare,out,0016765541256)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [recordcheck@sub-record-check:1] NoOp(“Local/0016765541256@from-internal-xfer-000213b1;2”, “Starting recording check against dontcare”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [recordcheck@sub-record-check:2] Goto(“Local/0016765541256@from-internal-xfer-000213b1;2”, “dontcare”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (sub-record-check,recordcheck,3)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [recordcheck@sub-record-check:3] Return(“Local/0016765541256@from-internal-xfer-000213b1;2”, “”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [out@sub-record-check:8] Return(“Local/0016765541256@from-internal-xfer-000213b1;2”, “”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [0016765541256@from-internal-xfer:3] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0 ?Set(CDR(accountcode)=)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [0016765541256@from-internal-xfer:4] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “MOHCLASS=default”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [0016765541256@from-internal-xfer:5] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?Set(TRUNKCIDOVERRIDE=62981097)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [0016765541256@from-internal-xfer:6] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “_NODEST=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [0016765541256@from-internal-xfer:7] Macro(“Local/0016765541256@from-internal-xfer-000213b1;2”, “dialout-trunk,15,0016765541256,off”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:1] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “DIAL_TRUNK=15”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:2] GosubIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?sub-pincheck,s,1()”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:3] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?disabletrunk,1”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:4] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “DIAL_NUMBER=0016765541256”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:5] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “DIAL_TRUNK_OPTIONS=Ttr”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:6] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “OUTBOUND_GROUP=OUT_15”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:7] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “1?nomax”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (macro-dialout-trunk,s,9)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:9] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?skipoutcid”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:10] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “DIAL_TRUNK_OPTIONS=Tt”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:11] Macro(“Local/0016765541256@from-internal-xfer-000213b1;2”, “outbound-callerid,15”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:1] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “1?Set(CALLERPRES()=allowed_not_screened)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:2] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?Set(REALCALLERIDNUM=31433254059)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:3] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?normcid”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:4] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “USEROUTCID=31433254059”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:5] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “1?bypass”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (macro-outbound-callerid,s,7)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:7] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “EMERGENCYCID=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:8] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “TRUNKOUTCID=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:9] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “1?trunkcid”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (macro-outbound-callerid,s,14)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:14] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?Set(CALLERID(all)=)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:15] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “1?Set(CALLERID(all)=31433254059)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:16] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?Set(CALLERID(all)=)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:17] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?Set(CALLERPRES()=prohib_passed_screen)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:18] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “CDR(outbound_cnum)=31433254059”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-outbound-callerid:19] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “CDR(outbound_cnam)=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:12] GosubIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?sub-flp-15,s,1()”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:13] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “OUTNUM=0016765541256”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:14] Set(“Local/0016765541256@from-internal-xfer-000213b1;2”, “custom=SIP/sgpg100”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:15] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?Set(DIAL_TRUNK_OPTIONS=M(setmusic^default)Tt)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:16] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?Set(DIAL_TRUNK_OPTIONS=TtM(confirm))”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:17] Macro(“Local/0016765541256@from-internal-xfer-000213b1;2”, “dialout-trunk-predial-hook,”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk-predial-hook:1] MacroExit(“Local/0016765541256@from-internal-xfer-000213b1;2”, “”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:18] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?bypass,1”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:19] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?Set(CONNECTEDLINE(num,i)=0016765541256)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:20] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?Set(CONNECTEDLINE(name,i)=CID:31433254059)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:21] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?customtrunk”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-dialout-trunk:22] Dial(“Local/0016765541256@from-internal-xfer-000213b1;2”, “SIP/sgpg100/0016765541256,300,Tt”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] netsock2.c: == Using SIP RTP TOS bits 184
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] netsock2.c: == Using SIP RTP CoS mark 5
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] app_dial.c: – Called SIP/sgpg100/0016765541256
[2017-05-05 22:03:40] VERBOSE[14185][C-00022e0b] app_dial.c: – SIP/sgpg100-00005ff3 answered Local/0016765541256@from-internal-xfer-000213b1;2
[2017-05-05 22:03:40] NOTICE[14185][C-00022e0b] channel.c: Dropping incompatible voice frame on SIP/sgpg100-00005ff3 of format g722 since our native format has changed to (ulaw)
[2017-05-05 22:03:45] NOTICE[14185][C-00022e0b] channel.c: Dropping incompatible voice frame on SIP/sgpg100-00005ff3 of format ulaw since our native format has changed to (g722)
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [h@macro-dialout-trunk:1] Macro(“Local/0016765541256@from-internal-xfer-000213b1;2”, “hangupcall,”) in new stack
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-hangupcall:1] ExecIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “0?Set(CDR(recordingfile)=.wav)”) in new stack
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-hangupcall:2] GotoIf(“Local/0016765541256@from-internal-xfer-000213b1;2”, “1?theend”) in new stack
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (macro-hangupcall,s,4)
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [s@macro-hangupcall:4] Hangup(“Local/0016765541256@from-internal-xfer-000213b1;2”, “”) in new stack
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] app_macro.c: == Spawn extension (macro-hangupcall, s, 4) exited non-zero on ‘Local/0016765541256@from-internal-xfer-000213b1;2’ in macro ‘hangupcall’
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: == Spawn extension (macro-dialout-trunk, h, 1) exited non-zero on ‘Local/0016765541256@from-internal-xfer-000213b1;2’
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] app_macro.c: == Spawn extension (macro-dialout-trunk, s, 22) exited non-zero on ‘Local/0016765541256@from-internal-xfer-000213b1;2’ in macro ‘dialout-trunk’
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: == Spawn extension (from-internal-xfer, 0016765541256, 7) exited non-zero on ‘Local/0016765541256@from-internal-xfer-000213b1;2’

I am assuming that none of your IVR options are redirecting to DISA?

He is using the blind transfer feature code of freepbx.
In your inbound dial options you have the T trigger enabled, remove and check again.