Change the COS to 30 for the VM ports which is internal calls only this will stop it for sure , they would of been able to hack through the message notification ports in the Mclass, these need to set to none and i'm guessing atm they are set to all.