Help read this call log to determine how they are making fraudulent calls

Can someone please help me read the following log to determine how this caller is able to make outbound calls through our IVR? I thought I would post it while I am reviewing the log myself and maybe someone could help me sooner before I can figure it out. Thanks all!

[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:1] Macro(“Local/[email protected];2”, “user-callerid,LIMIT,EXTERNAL,”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:1] Set(“Local/[email protected];2”, “TOUCH_MONITOR=1493993017.296999”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:2] Set(“Local/[email protected];2”, “AMPUSER=31433254059”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:3] GotoIf(“Local/[email protected];2”, “0?report”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:4] ExecIf(“Local/[email protected];2”, “1?Set(REALCALLERIDNUM=31433254059)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:5] Set(“Local/[email protected];2”, “AMPUSER=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:6] GotoIf(“Local/[email protected];2”, “0?limit”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:7] Set(“Local/[email protected];2”, “AMPUSERCIDNAME=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:8] GotoIf(“Local/[email protected];2”, “1?report”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (macro-user-callerid,s,16)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:16] GotoIf(“Local/[email protected];2”, “1?continue”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (macro-user-callerid,s,30)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:30] Set(“Local/[email protected];2”, “CALLERID(number)=31433254059”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:31] Set(“Local/[email protected];2”, “CALLERID(name)=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:32] Set(“Local/[email protected];2”, “CDR(cnum)=31433254059”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:33] Set(“Local/[email protected];2”, “CDR(cnam)=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:34] Set(“Local/[email protected];2”, “CHANNEL(language)=en”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:2] Gosub(“Local/[email protected];2”, “sub-record-check,s,1(out,0016765541256,dontcare)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:1] GotoIf(“Local/[email protected];2”, “11?initialized”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (sub-record-check,s,10)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:10] NoOp(“Local/[email protected];2”, “Recordings initialized”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:11] ExecIf(“Local/[email protected];2”, “0?Set(ARG3=dontcare)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:12] Set(“Local/[email protected];2”, “REC_POLICY_MODE_SAVE=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:13] ExecIf(“Local/[email protected];2”, “0?Set(REC_STATUS=NO)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:14] GotoIf(“Local/[email protected];2”, “3?checkaction”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (sub-record-check,s,17)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:17] GotoIf(“Local/[email protected];2”, “1?sub-record-check,out,1”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (sub-record-check,out,1)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:1] NoOp(“Local/[email protected];2”, “Outbound Recording Check from 31433254059 to 0016765541256”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:2] Set(“Local/[email protected];2”, “RECMODE=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:3] ExecIf(“Local/[email protected];2”, “1?Goto(routewins)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (sub-record-check,out,7)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:7] Gosub(“Local/[email protected];2”, “recordcheck,1(dontcare,out,0016765541256)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:1] NoOp(“Local/[email protected];2”, “Starting recording check against dontcare”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:2] Goto(“Local/[email protected];2”, “dontcare”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (sub-record-check,recordcheck,3)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:3] Return(“Local/[email protected];2”, “”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:8] Return(“Local/[email protected];2”, “”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:3] ExecIf(“Local/[email protected];2”, “0 ?Set(CDR(accountcode)=)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:4] Set(“Local/[email protected];2”, “MOHCLASS=default”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:5] ExecIf(“Local/[email protected];2”, “0?Set(TRUNKCIDOVERRIDE=62981097)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:6] Set(“Local/[email protected];2”, “_NODEST=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:7] Macro(“Local/[email protected];2”, “dialout-trunk,15,0016765541256,off”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:1] Set(“Local/[email protected];2”, “DIAL_TRUNK=15”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:2] GosubIf(“Local/[email protected];2”, “0?sub-pincheck,s,1()”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:3] GotoIf(“Local/[email protected];2”, “0?disabletrunk,1”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:4] Set(“Local/[email protected];2”, “DIAL_NUMBER=0016765541256”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:5] Set(“Local/[email protected];2”, “DIAL_TRUNK_OPTIONS=Ttr”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:6] Set(“Local/[email protected];2”, “OUTBOUND_GROUP=OUT_15”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:7] GotoIf(“Local/[email protected];2”, “1?nomax”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (macro-dialout-trunk,s,9)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:9] GotoIf(“Local/[email protected];2”, “0?skipoutcid”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:10] Set(“Local/[email protected];2”, “DIAL_TRUNK_OPTIONS=Tt”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:11] Macro(“Local/[email protected];2”, “outbound-callerid,15”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:1] ExecIf(“Local/[email protected];2”, “1?Set(CALLERPRES()=allowed_not_screened)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:2] ExecIf(“Local/[email protected];2”, “0?Set(REALCALLERIDNUM=31433254059)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:3] GotoIf(“Local/[email protected];2”, “0?normcid”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:4] Set(“Local/[email protected];2”, “USEROUTCID=31433254059”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:5] GotoIf(“Local/[email protected];2”, “1?bypass”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (macro-outbound-callerid,s,7)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:7] Set(“Local/[email protected];2”, “EMERGENCYCID=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:8] Set(“Local/[email protected];2”, “TRUNKOUTCID=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:9] GotoIf(“Local/[email protected];2”, “1?trunkcid”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (macro-outbound-callerid,s,14)
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:14] ExecIf(“Local/[email protected];2”, “0?Set(CALLERID(all)=)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:15] ExecIf(“Local/[email protected];2”, “1?Set(CALLERID(all)=31433254059)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:16] ExecIf(“Local/[email protected];2”, “0?Set(CALLERID(all)=)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:17] ExecIf(“Local/[email protected];2”, “0?Set(CALLERPRES()=prohib_passed_screen)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:18] Set(“Local/[email protected];2”, “CDR(outbound_cnum)=31433254059”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:19] Set(“Local/[email protected];2”, “CDR(outbound_cnam)=”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:12] GosubIf(“Local/[email protected];2”, “0?sub-flp-15,s,1()”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:13] Set(“Local/[email protected];2”, “OUTNUM=0016765541256”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:14] Set(“Local/[email protected];2”, “custom=SIP/sgpg100”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:15] ExecIf(“Local/[email protected];2”, “0?Set(DIAL_TRUNK_OPTIONS=M(setmusic^default)Tt)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:16] ExecIf(“Local/[email protected];2”, “0?Set(DIAL_TRUNK_OPTIONS=TtM(confirm))”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:17] Macro(“Local/[email protected];2”, “dialout-trunk-predial-hook,”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:1] MacroExit(“Local/[email protected];2”, “”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:18] GotoIf(“Local/[email protected];2”, “0?bypass,1”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:19] ExecIf(“Local/[email protected];2”, “0?Set(CONNECTEDLINE(num,i)=0016765541256)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:20] ExecIf(“Local/[email protected];2”, “0?Set(CONNECTEDLINE(name,i)=CID:31433254059)”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:21] GotoIf(“Local/[email protected];2”, “0?customtrunk”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:22] Dial(“Local/[email protected];2”, “SIP/sgpg100/0016765541256,300,Tt”) in new stack
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] netsock2.c: == Using SIP RTP TOS bits 184
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] netsock2.c: == Using SIP RTP CoS mark 5
[2017-05-05 22:03:37] VERBOSE[14185][C-00022e0b] app_dial.c: – Called SIP/sgpg100/0016765541256
[2017-05-05 22:03:40] VERBOSE[14185][C-00022e0b] app_dial.c: – SIP/sgpg100-00005ff3 answered Local/[email protected];2
[2017-05-05 22:03:40] NOTICE[14185][C-00022e0b] channel.c: Dropping incompatible voice frame on SIP/sgpg100-00005ff3 of format g722 since our native format has changed to (ulaw)
[2017-05-05 22:03:45] NOTICE[14185][C-00022e0b] channel.c: Dropping incompatible voice frame on SIP/sgpg100-00005ff3 of format ulaw since our native format has changed to (g722)
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:1] Macro(“Local/[email protected];2”, “hangupcall,”) in new stack
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:1] ExecIf(“Local/[email protected];2”, “0?Set(CDR(recordingfile)=.wav)”) in new stack
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:2] GotoIf(“Local/[email protected];2”, “1?theend”) in new stack
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: – Goto (macro-hangupcall,s,4)
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: – Executing [[email protected]:4] Hangup(“Local/[email protected];2”, “”) in new stack
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] app_macro.c: == Spawn extension (macro-hangupcall, s, 4) exited non-zero on ‘Local/[email protected];2’ in macro ‘hangupcall’
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: == Spawn extension (macro-dialout-trunk, h, 1) exited non-zero on ‘Local/[email protected];2’
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] app_macro.c: == Spawn extension (macro-dialout-trunk, s, 22) exited non-zero on ‘Local/[email protected];2’ in macro ‘dialout-trunk’
[2017-05-05 22:03:46] VERBOSE[14185][C-00022e0b] pbx.c: == Spawn extension (from-internal-xfer, 0016765541256, 7) exited non-zero on ‘Local/[email protected];2’

I am assuming that none of your IVR options are redirecting to DISA?

He is using the blind transfer feature code of freepbx.
In your inbound dial options you have the T trigger enabled, remove and check again.