My SonicWALL's showing some strange activity that's started repeating daily since around last week. Every day, I get a series of alerts within the same time frame. I have port scans coming in from 64.94.110.12, which takes you to the Verisign website if you enter it into your web browser. During that same time frame, I'm receiving fraudulent Microsoft Certificates from the same IP that are being blocked by the firewall.

So what's up with this?