We have received an alert from cisco observable with the following description:
This source normally doesn't talk to external devices, but has recently.
The device in question is a cisco 8851 desk phone.
The device is always plugged in to the network and no update was being run.
The device is still working but would be great to know why this alert randomly show up.
Any type of advice would be much appreciated.