I have seen this at a customer's site who was running a network mapping software which essentially created a DOS condition on the phone, on a side note only the 5360's were effected not the 5320's. We ran a packet capture using the mirrored port option on the phone and found it to be related to the software probing port 5060 with Sip messages. The monitor would refresh every two hours which would in return reset the phones every two hours.