Random calls from internal?

I am getting calls from 9909, an extension that does not exist, ever since I installed a new Polycom 320 phone. It gets the calls, I cannot tell why. Here is what happens in the log when the phone rings. The extension called is 102. I don’t seem to be able to answer it successfully.

This is the latest FreePBX distro, and is fully updated. Everything seems to work otherwise.

Can anyone tell me what might be causing this?

[2016-04-09 23:17:40] VERBOSE[1886][C-00000262] netsock2.c: Using SIP RTP TOS bits 184
[2016-04-09 23:17:40] VERBOSE[1886][C-00000262] netsock2.c: Using SIP RTP CoS mark 5
[2016-04-09 23:17:40] VERBOSE[7322][C-00000262] pbx.c: Executing [9909@from-internal:1] ResetCDR(“SIP/102-0000027b”, “”) in new stack
[2016-04-09 23:17:40] VERBOSE[7322][C-00000262] pbx.c: Executing [9909@from-internal:2] NoCDR(“SIP/102-0000027b”, “”) in new stack
[2016-04-09 23:17:40] VERBOSE[7322][C-00000262] pbx.c: Executing [9909@from-internal:3] Progress(“SIP/102-0000027b”, “”) in new stack
[2016-04-09 23:17:40] VERBOSE[7322][C-00000262] pbx.c: Executing [9909@from-internal:4] Wait(“SIP/102-0000027b”, “1”) in new stack
[2016-04-09 23:17:41] VERBOSE[7322][C-00000262] pbx.c: Executing [9909@from-internal:5] Progress(“SIP/102-0000027b”, “”) in new stack
[2016-04-09 23:17:41] VERBOSE[7322][C-00000262] pbx.c: Executing [9909@from-internal:6] Playback(“SIP/102-0000027b”, “silence/1&cannot-complete-as-dialed&check-number-dial-again,noanswer”) in new stack
[2016-04-09 23:17:41] VERBOSE[7322][C-00000262] file.c: <SIP/102-0000027b> Playing ‘silence/1.ulaw’ (language ‘en’)
[2016-04-09 23:17:42] VERBOSE[7322][C-00000262] file.c: <SIP/102-0000027b> Playing ‘cannot-complete-as-dialed.ulaw’ (language ‘en’)
[2016-04-09 23:17:44] VERBOSE[7322][C-00000262] file.c: <SIP/102-0000027b> Playing ‘check-number-dial-again.ulaw’ (language ‘en’)
[2016-04-09 23:17:44] VERBOSE[7322][C-00000262] pbx.c: Executing [h@from-internal:1] Macro(“SIP/102-0000027b”, “hangupcall”) in new stack
[2016-04-09 23:17:44] VERBOSE[7322][C-00000262] pbx.c: Executing [s@macro-hangupcall:1] GotoIf(“SIP/102-0000027b”, “1?theend”) in new stack
[2016-04-09 23:17:44] VERBOSE[7322][C-00000262] pbx.c: Goto (macro-hangupcall,s,3)
[2016-04-09 23:17:44] VERBOSE[7322][C-00000262] pbx.c: Executing [s@macro-hangupcall:3] ExecIf(“SIP/102-0000027b”, “0?Set(CDR(recordingfile)=)”) in new stack
[2016-04-09 23:17:44] VERBOSE[7322][C-00000262] pbx.c: Executing [s@macro-hangupcall:4] Hangup(“SIP/102-0000027b”, “”) in new stack
[2016-04-09 23:17:44] VERBOSE[7322][C-00000262] app_macro.c: Spawn extension (macro-hangupcall, s, 4) exited non-zero on ‘SIP/102-0000027b’ in macro ‘hangupcall’
[2016-04-09 23:17:44] VERBOSE[7322][C-00000262] pbx.c: Spawn extension (from-internal, h, 1) exited non-zero on ‘SIP/102-0000027b’

No, extension 102 is calling 9909.

Sounds to me like your system is compromised. “9” is a common dial prefix for “Give me an outside line”.