I went ahead and did the sip debug and these are what I believe would be the relevant lines for this extension. A lot of stuff scrolls so I just grabbed stuff that shows for that extension.
Code:
SIP Debugging enabled
== Parsing '/etc/asterisk/manager.conf': Found
== Manager 'administrator' logged on from 192.168.111.124
== Manager 'administrator' logged off from 192.168.111.124
<--- SIP read from 111.111.111.111 --->
NOTIFY sip:our.server.com SIP/2.0
Via: SIP/2.0/UDP 111.111.111.111:1025;branch=z9hG4bK-f63b27b4
From: "My Name" <sip:100@our.server.com>;tag=c9023fb4dd76dbd1o0
To: <sip:our.server.com>
Call-ID: d29ded20-eaab2d55@192.168.10.100
CSeq: 363888 NOTIFY
Max-Forwards: 70
Event: keep-alive
User-Agent: Linksys/SPA962-5.2.8(SC)
Content-Length: 0
<------------->
--- (10 headers 0 lines) ---
Sending to 70.131.148.35 : 1025 (NAT)
<--- Transmitting (NAT) to 111.111.111.111:1025 --->
SIP/2.0 489 Bad event
Via: SIP/2.0/UDP 111.111.111.111:1025;branch=z9hG4bK-f63b27b4;received=111.111.111.111
From: "My Name" <sip:100@our.server.com>;tag=c9023fb4dd76dbd1o0
To: <sip:our.server.com>;tag=as241c3c1d
Call-ID: d29ded20-eaab2d55@192.168.10.100
CSeq: 363888 NOTIFY
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Content-Length: 0
<------------>
I don't see anything relating to the manager account except for the logon and logoff which seems strange.