ITMS 8.5 RU2 and later.
In this particular case, the message refers to someone wants to connect to the CEM web socket on the SMP but does not provide any certificate. No more info available. The machine with IP Address 10.1.110.95 in this example cannot connect over persistent connection.
These log entries just refer to machines that could have an obsolete/invalid certificate or just can't connect with a persistent connection (but still be able to connect with the standard way).
If client with specified address is the SMP own agent, check what is happening with CEM configuration, like the SMP is added as a CEM agent by mistake for example.
Now, if the IP address mentioned in the logs refers to the internal Internet Gateway addresses, that could indicate that computer not in the CEM policy is trying to use the Internet Gateway to connect.
Also, the following GUID in the message:
This is an internal socket id, not a computer GUID. At that point only the IP address is known since this is connection establishment validation.