Seeing a bunch of "seemingly legit" hits from what looks to be the android app on one of our phones, in my WAF which sits in front of my HA. I'm sure its legit, but i figured it would be via normal API's rather than webhooks.
(I don't have any webhooks set up elsewhere on my HA)